IT Security Risk Officer Future Options Consulting

Knowledge, Skills & Competences
• Good working knowledge of T24 Core Banking System is preferred.
• Demonstrated ability to participate in complex, comprehensive or large IT related projects and initiatives.

Responsibilities
Key Responsibilities
• Conduct Information System risk assessments for new and existing systems, applications and programs to ensure compliance with the bank’s security policies and regulatory requirements.
• Identify weaknesses or security exposures and prescribe solutions to mitigate the risks related to those weaknesses and exposures.
• Perform periodic and surprise systems security assessments.
• Identify and evaluate business technology risks and internal controls which mitigate risks, and related opportunities for internal control improvement and propose risk treatment plans.
• Provide guidance over the general activities and concerns of the Bank’s IT function.
• Liaise and co-ordinate with respective Operational Risk Champions to review IT risk and control self-assessments.
• Develop and monitor IT key risk indicators.
• Monitor and track IT risk events and follow up on associated actions plans to closure.
• Analyze audit findings and assist in implementing audit recommendations
• Maintain an up to date understanding of emerging trends in information security risks; apply new techniques and trends, in line with overall information security objectives and risk tolerance
• Develop, document, maintain and support the information security risk management program in line with information security policy, practices and leading industry standards
• Assist with assessment of vendors and business contracts for evaluation and tracking of risk changes Support in the development of policies/standards/guidelines/best practices.

Qualifications
• A Bachelor’s degree in Information Systems, Computer Science or any other related discipline from a recognized university.
• Professional IT Security Certification e.g. CRISC, CISA or other related certification is an added advantage.
• Advanced knowledge of organization, technology controls, security and risk issues

Details of experience
• At least 3 years’ professional experience in information risk related position in a financial institution.