Senior Risk Manager: Data Risk

Requisition

Talent Acquisition Specialist:
Tshego Semenya

Location:

135 Rivonia Road, Sandown

Closing date: 29 January 2025

To lead the Data Risk (including privacy risk) mandate for PPB by embedding and ope rationalising relevant Group Risk frameworks and ensuring effective governance over all data‑related risks. The role provides expert oversight across the data lifecycle, ensuring regulatory compliance, identifying emerging risks and partnering with business and technical teams to strengthen PPB’s data risk posture.

• Embed and ope rationalise the Group Risk, Data Risk, Cyber Security Risk and Privacy Frameworks across PPB by integrating risk standards into business processes and governance routines.
• Identify, assess, document and monitor data‑related risks across business units, ensuring appropriate controls, mitigation plans and remediation timelines are established.
• Lead investigations into data breaches, privacy incidents, compliance findings and other data‑related risk events, including root‑cause analysis and tracking of corrective actions.
• Maintain and oversee the PPB Data Risk Register, ensuring all risks, controls and remediation items are accurately recorded, monitored and updated.
• Analyse complex data ecosystems — including data pipelines, engineering approaches, cloud environments and automation tools — to identify vulnerabilities and emerging risks.
• Prepare, facilitate and present comprehensive data and privacy risk reporting at senior governance committees such as EXCO, ERCO, BUCC and OPCOM.

• Provide specialised expertise on data engineering concepts such as SQL, ETL processes, data warehousing, data modelling and end‑to‑end data lifecycle management.
• Challenge technical decisions and proposed solutions from operational and data engineering teams to ensure data integrity, privacy and risk considerations are fully addressed.
• Collaborate with CIA, Data Management Officers, privacy teams and business units to ensure compliance with regulatory requirements including POPIA, GDPR and internal data governance policies.
• Monitor and assess emerging data risks, regulatory updates, industry trends and technology changes that may impact PPB’s risk posture.
• Support AI‑related risk assessments, model validation processes, and governance relating to machine learning, automated decisioning and algorithmic transparency.

• Build and maintain strong partnerships with CIA Data teams, Data Management Officers, Internal Audit, Group Risk and PPB Executives to align on data and privacy risk expectations.
• Engage with cross‑functional teams to provide expert advice, influence risk decisions and support implementation of effective data‑related controls.
• Drive data and privacy risk awareness through targeted communication, training initiatives and capability‑building efforts across PPB.

• Operate as a senior specialist who provides independent thought leadership, strategic insight and strong decision‑making within the data and privacy risk domain.
• Contribute to a culture of accountability, compliance, transformation and continuous improvement through proactive risk engagement and professional excellence.
• Promote collaboration, shared learning and professional curiosity across the risk ecosystem by guiding peers and supporting cluster‑wide risk initiatives.

• Advanced Diplomas/National 1st Degrees

• Bachelor’s degree in Information Technology, Data Science, Engineering, Computer Science, Risk Management or a related field.

• CRISC
• CISM
• Data Governance Certifications (DAMA, DCAM etc.)

• 4+ years of hands‑on experience in data‑related roles, including work in data engineering, data management, analytics, or data governance.
• Practical exposure to SQL, ETL processes, data pipelines, data warehousing, or data modelling, demonstrating an ability to understand data structures and technical environments.
• Experience working within complex data ecosystems and contributing to data quality, data controls, or data‑related processes.