The Risk Manager, Cyber & IT is a critical role within Nedbank Private Wealth Limited’s (‘NPWL’) Risk Function. Reporting to the Head of Risk, Cyber & IT, you will be responsible for identifying, assessing, and mitigating Cyber and IT related risks across the organisation. This includes supporting the Head of Risk, Cyber & IT in developing NPWL’s Operational Resilience, Business Continuity, and Information Security programmes.

​You will develop and implement risk management strategies and policies, and coordinate activities with the IT and Cyber teams in the first line of defence to enhance our resilience and safeguard our IT infrastructure, data and information assets, and operational activities. You will ensure compliance with regulatory requirements and industry best practices while promoting a culture of risk awareness and proactive risk management.

​Responsibilities & Duties

**​Technological Risk Management:**​

• Provide support on information security governance, Cyber and IT risk management, and compliance activities, including risk assessments, control selection, and mitigation strategies.
• Assist with the development and implementation of Cyber, IT, Operational Resilience and Information Security Risk management frameworks, methodologies and processes tailored to the organisation’s needs and objectives.
• Champion and embed COBIT framework within NPWL.
• Conduct ongoing risk assessments to identify, evaluate, and mitigate IT risks, including security and compliance risks. Help to develop risk mitigation plans and strategies to address identified risks.
• Assist with the review, updating, and communicating of IT governance policies, procedures, and standards across the organisation.
• Establish and monitor key performance indicators (KPIs) to track IT performance against governance goals. Regularly report on these metrics to upper management and relevant stakeholders.
• Monitor and analyse emerging IT, Cyber and Information Security risks, industry trends, and regulatory changes to inform risk management strategies and priorities.
• Prepare and present reports to senior management in the organisation’s Cyber, IT, Operational Resilience and Information Security posture.

Operational Resilience:

• Support enhancements to NPWL Operational Resilience.
• Support and implement training programmes to educate employees on Cyber & Information Security and Operational Resilience.
• Support the design and maintenance of scenario testing plans, inclusive of business continuity and disaster recovery plans to ensure the availability of critical services during disruptions.
• Assist in response to live IT incidents, security incidents, data breaches, audit findings, breaches, and security events, including incident detection, investigation, containment and remediation efforts.

Regulatory & Audit Risk:

• Ensure compliance with relevant regulatory requirements and industry standards.
• Serve as the main point of contact for internal and external IT audits.
• Compile necessary documentation and provide evidence during audit reviews.
• Partner with both internal departments and external agencies to ensure successful audit completion.
• Administer post-audit feedback discussions and help drive the implementation of corrective actions.
• Conduct periodic assurance reviews and assessments to monitor compliance with data protection policies and identify areas for improvement.

• Degree in Information Technology, Information Security, Computer Science, Risk Management, or related field - Desirable.
• Professional certifications (e.g., CRISC, CISA, CISSP, CISM,) preferred.
• 5 years of experience in Information Technology, Cybersecurity, Risk Management and Audit or related governance roles preferred.
• Strong knowledge of information security principles, frameworks, and best practices (e.g., ISO 27001, NIST Cybersecurity Framework, COBIT) with experience of implementing security controls and technologies in enterprise environments.