IT Risk and Cyber Security Risk Specialist

SUMMARY:
Searching for IT Risk and Cyber Security Risk Specialist skills and experience within JHB!

POSITION INFO:
As an IT Risk and Cyber Security Risk Specialist, you will be responsible for assessing, implementing, and maintaining risk management frameworks to safeguard the organisation’s data, networks, and systems against security threats. Your role will be pivotal in identifying vulnerabilities, mitigating risks, and ensuring compliance with industry regulations and security standards.

You will collaborate with cross-functional teams to analyse security risks, enhance cyber defences, and promote a culture of risk awareness. This is an opportunity to work with cutting-edge security tools, expand your expertise, and play a key role in strengthening the organisation's cyber resilience.
Ensure your opportunity to further your career at:

Duties:

• Develop and implement IT Risk and Cyber Security Risk Management frameworks, policies, and standards.
• Conduct risk assessments, evaluate control effectiveness, and recommend mitigation strategies.
• Analyse and monitor action plans to reduce risks and improve security posture.
• Investigate and conduct root cause analyses on IT and cyber security incidents in collaboration with key stakeholders.
• Communicate security risks, incidents, and mitigation strategies to management.
• Conduct training and awareness programs on IT risk and cyber security.
• Provide business stakeholders with expert guidance on security risks and best practices.
• Identify gaps, optimise processes, and recommend security improvements to enhance operational efficiency.
• Assist in IT security project planning, execution, and governance.
• Support regulatory compliance by monitoring risk indicators and reporting material deviations.

• Matric (Grade 12)
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field
• Honour’s degree in relevant field will be advantageous.
• Certifications such as COBIT, ITIL, or ISO 27000, or similar are highly desirable.

• A minimum of 3-5 years of experience in IT and Cyber Security Risk Management.
• Hands-on experience in vulnerability assessments, risk analysis, and security monitoring.
• Proven ability to assess IT environments and mitigate internal and external security threats.
• Knowledge of cybersecurity frameworks and standards (e.g., NIST, ISO 27001, PCI DSS).

• Strong understanding of IT and cyber security risk frameworks and methodologies.
• Expertise in IT risk assessments, vulnerability management, and security best practices.
• Experience with cyber security metrics, monitoring tools, and rule creation for security controls.
• Knowledge of IT governance, compliance, and regulatory frameworks in banking.
• Strong analytical, problem-solving, and critical-thinking skills.
• Excellent communication and stakeholder engagement abilities.
• Ability to conduct risk-based evaluations and recommend mitigation strategies.
• Effective time management and project planning skills.