Business Unit: Discovery Central Services
Function: IT Risk Management
Date: 2 Nov 2023
Discovery – Group Risk Management
Senior IT Risk Specialist

EDUCATION AND EXPERIENCE

• Bachelor’s degree in information technology, Computer Science, or a related field.
• A master’s degree or relevant certifications (e.g., CISA, CISSP, CRISC) may be preferred.
• Proven experience (typically 5+ years) in IT risk management, information security, or a related field, with at least some years in a senior or leadership capacity.
• In-depth knowledge of IT risk management frameworks, methodologies, and best practices.
• Familiarity with relevant regulations and standards (e.g., ISO 27001, NIST, GDPR/POPIA) and their application in IT risk management.
• Strong analytical skills and the ability to assess complex IT systems and processes for potential risks.
• Excellent communication and presentation skills to interact with stakeholders at various levels of the organisation.
• Demonstrated ability to work independently, lead cross-functional teams, and handle multiple priorities simultaneously.
• A proactive approach to risk identification and a continuous improvement mindset.
• Advanced knowledge of Excel, Word, PowerPoint, Power BI, and Teams

KEY PURPOSE

The Senior IT Risk Specialist is a critical role within the organisation, responsible for ensuring the effective management and mitigation of IT-related risks. This position plays a pivotal role in safeguarding the company’s information systems, technology infrastructure, and digital assets against potential threats. The Senior IT Risk Specialist will work closely with various departments and stakeholders to identify, assess, and manage IT risks, ensuring compliance with regulatory requirements and industry best practices.

The Group Risk Management (GRM) Function is a group risk management function independent of day-to-day management. Its primary responsibilities include:

• assisting the Group to identify, assess, monitor, manage and mitigate its material risks, and promote a sound risk culture; and
• Assisting the Discovery Limited Board and senior management to develop and maintain the Group’s risk management system, including promptly informing the Discovery Limited Board of any circumstance that may have an adverse material effect on the risk management system of the Group