IT Risk Administrator

at  Sanlam

WHO ARE WE?

Sanlam Group Technology is responsible for the provision of a digitally enabled technology service as a group COE, drive business and transformation and provide group-wide digital and data architecture. We operate the various technology platforms and shared services, ensure Cyber and Information Security resilience, and act as technology governance and risk orchestrator for technology across Sanlam.

QUALIFICATIONS

• 3yr Diploma or Degree in either Risk or Security or related IT field (min NQF 7)
• Accredited Certification in Risk/Security will be beneficial

EXPERIENCE

• A minimum of 2-year Risk Management experience (ideally in Information Technology)
• A minimum of 1-year experience of IT Audit and Assurance
• Some exposure to Risk Management Platforms such as Cura Barnowl, BWise etc would be beneficial
• Technical experience in the information security domain would be beneficial
• A minimum of 2 to 5 years Microsoft Office experience (Excel/Word/ PowerPoint/Visio)
• Intermediate/Expert level on Microsoft Excel

KNOWLEDGE AND SKILLS

Cyber Security Administration
Cyber Security Audits
Cyber Security Analysis
Cyber Security Compliance
Cyber Security Monitoring

WHAT WILL YOU DO?

The role of IT Risk Administrator resides in the Governance, Risk and Business Engagement function that isresponsible for governance and IT Risk Management within the Sanlam Group. The IT Risk Administrator willbe actively involved in supporting IT risk management and Third-Party Risk management activities to supportthe achievement of the SGT Objectives.

WHAT WILL MAKE YOU SUCCESSFUL IN THIS ROLE?

• 2nd line Audit assurance and compliance
• Implementing & Automating Risk management processes
• Facilitate Risk Acceptance process – capture, quality assurance and approval process
• Facilitating Third Party Risk Management campaigns on platform
• Manage and report progress on remedial activities from risk assessments
• Facilitate Awareness campaigns for the third-party risk management tool
• Build strong relationships with Information security teams
• Assist with enforcing IT risk-related policy compliance
• Convene & co-ordinate SGT IT Risk Manco meeting
• Convene co-ordinate Group IT Audit & Risk Forum meeting
• Administrative support for IT Risk Manco & Audit & Risk Forum
• Attending the following meetings:
• Internal & External audit meetings
• SGT Service line risk review meetings
• ISO forums
• Third Party Risk Assessment reviews
  Qualifications and Experience