Main Purpose Statement

The primary purpose of the role is to take responsibility for the coordination of the IT Risk, Governance, Third Party Risk of the IT function.  This involves ensuring the appropriate frameworks and standards are implemented and monitored across these disciplines.

Key Responsibilities

• Identifying potential IT & Cyber risks inherent in the activity
• Analysing IT & Cyber risks 
• Reporting on the management of IT & Cyber risks
• Contributing to the various exercises and review on controlling and assessing IT , Cyber risks and Third Party Risks

Identifying potential IT & Cyber risks inherent in the activity based on:

• The entity’s IT & Cyber risk monitoring Dashboards
• A periodic review of the various IT & Cyber risk issues 

Analysing or reporting on operational risks and control plans

• Third Party Risk Reviews (IT Due Diligence)

Analysing IT & Cyber risks:

• Identifying the principal causes of IT & Cyber risks and potentially adverse events from an IT & Cyber risk perspective
• Evaluating IT & Cyber risks by considering their likelihood of occurrence and the IT and business impacts

Identifying and taking account of mitigation measures put in place in respect of IT & Cyber risks 

• Monitoring the roll-out of remediation plans
• Providing support and the requested inputs to exercises and audits

Reporting on the management of IT & Cyber risks to the entity’s CIO:

• Reporting alerts and suggesting corrective measures
• Providing a consolidated view of IT & Cyber risks

Key competencies

• Strong analytical and problem-solving skills 
• Attention to detail
• Deadline driven and ability to work under pressure
• Ability to excel in a fast-paced changing environment
• Strong communication skills and ability to interact at all levels
• Ability to influence and persuade 

Knowledge, Skills and Experience

•Minimum of 2-3 years’ experience in an IT environment, including: IT Risk, Governance 

▪IT Audit, IT Control and Compliance experience (preferred)

•\Financial Services industry experience (preferred)