Specialist: Information and Technology Risk

Join Us in Becoming the Best Bank in the World!!

We appoint energized and motivated people for their potential and continuously look for talented, driven individuals to help us innovate and evolve. That is why we focus on finding the right people for the right jobs. We love what we do because we focus on making a positive difference for our clients and employees. Our company DNA is built around talented and committed teams dedicated to build a brand that we are proud of and earns the trust of our clients.

Who We Are

We are a bank, but we’re much more than that. We believe that banking is about enabling people to control their financial lives through banking that is simplified, accessible, affordable, and delivered through a personal experience. By helping our clients manage their financial lives better, we enable them to live better.

Why choose Us

At Capitec, we offer our best by living up to our CEO values in every situation – we always put the Client first, act with Energy and take Ownership. And to support people in being their best, our Employee Value Proposition offers every value to all team members through cohesive teams, growth opportunities as well as employee benefits and savings. We make it a priority to ensure that each member of the Capitec team feels welcome, valued, focused, and has the opportunity to grow.

Purpose Statement

• To provide independent oversight, advice and assistance to the business in the identification, evaluation, assessment and treatment of information and technology related risks.
• To improve risk awareness and risk culture through challenging first-line management’s information and technology risk management practices.

Experience

Minimum:

• 5 or more years’ experience in IT Risk Management and/or Internal/ External IT Auditing. 
• Proven experience in a governance and oversight capacity, e.g. IT Governance, IT Audit or Information Security
• Proven experience and understanding of Cyber and IT Security best practice and principles.

Ideal:

• Banking industry experience and knowledge
• Experience in data privacy and related compliance, e.g. RDARR, DAMA, GDPR
• Prior experience in a Cyber or IT Security role, e.g. ISO role, cyber security role, IT auditor (IT Security specialisation) 
• 5+ years’ specialist experience within risk and compliance

Qualifications (Minimum)

Qualifications (Ideal or Preferred)

Knowledge

Minimum:

• Experience applying/ Basic understanding of relevant risk methodologies and IT/ Cyber Security control frameworks, e.g. COBIT, ISF, ISO, NIST, ITIL, COSO, DAMA, DM-BOK
• Experience in performing risk and control assessments
• Experience in information risk management 
• Experience in IT risk management including information security
• General business acumen
• Understanding of IT/ Cyber Security and Cloud Computing

Ideal:

• Banking industry experience and knowledge, including BCBS-239 (RDARR principles)
• Experience in Information Technology Audit and Continuous Auditing techniques 
• Understanding of Data Management practices
• Knowledge of leading practices and regulatory requirements 

Skills

Conditions of Employment