Information Risk Manager

KEY RESPONSIBILITIES: MUST NOT BE MORE THAN 10

• Carry out reviews along the various phases of a project’s lifecycle as detailed in the bank’s Project Management framework to ensure that all delivered systems comply;
• Provide guidance in resolving IS audit findings and lead the development of reports and corrective action plans;
• Provide guidance for the Resumption and Recovery of time sensitive business operations in accordance with pre-established timeframes as well as ensuring that adequate plans are in place for the less time sensitive business operations;
• Develop and implement Risk Management Policies, procedure, standards and guidelines based on best practice benchmarking COBIT, ISO/IEC 270001, NIST, ITIL and other relevant standards;
• Review and recommend appropriate security enhancement of our network by evaluating network design and ensure implementation of effective firewall security policies;
• Manage incidents and complaints about ICT Services;
• In liaison with IT ensure effective change management process is in place;
• Review and evaluate system backup and disaster recovery standards for the bank, follow up on the implementation and provide support to ICT Department to ensure quick recovery in the event of disaster;
• Reviewing the Business Continuity Programme for effectiveness and completeness and recommend appropriate action;
• Reviewing System Security Configurations for effectiveness and recommend appropriate settings;

MINIMUM POSITION QUALIFICATION REQUIREMENTS

• Academic & Professional

Experience

• Information security - 4 years
• Systems audit - 3 years
• Forensics - 1 year
• Operations risk - 2 years