Head, Information Security, Governance, Risk and Compliance – Stanbic Bank Botswana 887 views

 

Reporting into the Head of Technology & Operations the incumbent will provide oversight in the delivery of Information Security services by coordinating Technology & Operations security governance, risk management, compliance programs and execute the Cyber Resilience Program. Establish local security capabilities to prevent significant reputational, financial or other losses, maintain control processes and escalation paths to adequately control the processes and functions supported within Technology & Operations.

Role Outputs

• Technology & Architecture – Implement the technology risk management capability in country in collaboration with the Regional Head.
• Risk, Regulatory, Prudential & Compliance – Execute on the risk management processes, procedures, frameworks, methods, standards and toolboxes, aligned to Standard Bank Group and Group Technology standards and regulatory requirements, in Country.
• Strategy – implement the Group Cyber Resilience Technology Standard in country and adapt based on country context.

Adopt the Risk Viability Feasibility (RVF) framework to ensure sufficient protection of clients’ money, data and time.

• Financial Management – Prepare annual financial forecasts and budgets to facilitate the management and operations of Country Information Security and formulating and gaining acceptance for annual budgets.
• Organisation Design – Establish and periodically review the information security organisational structure, and roles and responsibilities for organisational Security in line with the Group security strategy and toolbox.
• Client – Engage with relevant internal and external auditors to deliberate on technology risk related matters in Country.
• Data – Curate automated data feeds regarding key risk indicators and adherence to standards to feed into monitoring and oversight processes and governing body reporting. Collate automated data of exception reporting, self-assessments and independent assessments interpret data to provide assurance that technology risks are appropriately governed, managed and controlled in Country.
• People – Develop internal Information Security expertise and awareness through regular updates, awareness sessions and coaching of Technology staff to improve the security posture in Country. Identify key performance metrics against which individual performance will be measured, and identify opportunities to develop skills, ensuring the required information security services are rendered.

Competencies, Experience and Qualifications )

• Bachelor’s Degree in Information Technology, Computer Science or equivalent
• IT Risk/security certification such as CISM, CISSP or CISA, CRISC, CGEIT, ISACA, IIA will be an added advantage
• Minimum of 8-10 years’ experience in the implementation and management of information security policies and frameworks within a corporate environment.
• Experience in an Information Security, Compliance Audit role within the banking and /or financial services sector, IT Risk Management, Stakeholder Management.
• Experience working in a multi-vendor and outsourced and multi-system IT environment.
• Soft competencies: Interpreting data, leadership, providing insights, decision making, articulating information.

Stanbic Bank is on a transformation journey for service excellence and market supremacy in the provision of financial services in Botswana. When we are future-ready institution which strives to provide customized and fully automated solutions, enabled by modern digital technology to support distinctive client choices.

If you have the energy, the drive and the passion, then you are the person Stanbic Bank is looking for. Elevate your career to the next level where “IT CAN BE” is a way of life.