IT Risk Specialist

Hello…an exciting new opportunity has just become available in our HINT, Risk & Compliance area. We are looking to recruit a It Risk Specialist.

The IT Risk Specialist as a second line of defence role will be responsible for assisting HINT subsidiary teams with maturing the internal control environment through the embedding of adequately designed and effectively operating IT controls. Key focus areas will include IT Governance risk assessments, IT general controls, continuous monitoring and related controls self-assessments.

The IT Risk Specialist will execute specialised IT risk assessments in line with best practice frameworks COSO, COBIT, SANs 18 and DMBOK and apply a risk-based prioritisation approach in implementing IT Risk Management plans across all Hollard International operations. Risk support to HINT country operational business unit functions will comprise evaluating operating effectiveness assessments for IT governance, ITGC’s and IT security to enable the achievement of a satisfactory control IT control environment.

Operational / Technical

• IT risk assessments in accordance with the approved HINT ERM framework.
• Arrange and attend risk assessment kick-off and close-out meetings.
• Develop a sound understanding of business processes, risks and controls including relevant regulatory and accounting issues.
• Assess the design adequacy and effectiveness of the control environment and identify control gaps and opportunities for continuous improvement.
• Perform strategic digital reviews across information technology areas such as, data governance, disaster recovery and business continuity.
• Identify process, information and control gaps and seek additional information if necessary.
• Document detailed working papers.
• Document findings and discussion with client in terms of factual correctness – asks for support where necessary.
• Review own working papers for quality and completeness before sending to the Head of Risk and Compliance for review.
• Ensure all review queries are cleared within a reasonable timeframe (expectation 48 hours).
• Focus on problem solving / high risk areas during the audit.
• Communicate any delays or difficulties experienced for corrective action.
• Track risk assessment process status for allocated areas of responsibility and effectively communicate any anticipated challenges, delays, etc.
• Communicates knowledge gained throughout the audit engagement and / or otherwise with the team members.
• Conduct the review of controls self-assessments performed by operational teams.
• Present training on ITGC to HINT operational business unit teams.
• Assisting HINT subsidiaries and Risk officers with IT Governance risk assessments including Data Governance.
• Developing Information Technology General Controls (ITGC’s) control self-assessments for the HINT subsidiaries.
• Supporting HINT subsidiaries with the enablement of Continuous Controls Monitoring (CCM) through validation and clearing of exceptions and data quality validations.
• Periodic testing of segregation of duties, user access management, and change management.

Stakeholder Engagement

Reporting

Financial

#J-18808-Ljbffr