Business Resilience & Information Risk Manager

About the role

To provide specialist advice as a trusted business partner on the implementation and management of the Standard Bank(Stanbic Bank Botswana) Information Risk and Business Resilience Framework in order to enable Country with the mechanisms to identify, mitigate and treat information and business continuity risks ensuring the ethical and regulatory standards and requirements are adhered to and maintained.

Responsibilities

Provide specialist advice as a trusted business partner on the implementation and management of the Information Risk and Business Resilience Framework. Enable the country to identify, mitigate and treat information and business continuity risks. Ensure ethical and regulatory standards and requirements are adhered to and maintained.

Qualifications

• First Degree in Information Technology
• First Degree in Risk Management

Experience Required

• 3‑4 years of experience defending information from the risk of accidental or intentional unauthorized use, access, modification, disclosure, dissemination or destruction of information resources, which would compromise confidentiality, integrity and availability and potentially harm the business.
• 3‑4 years of experience analysing the risk posture on related non‑financial risks such as Cyber Risk, Technology Risk, Third Party Risks, Regulatory Compliance Risk, and Legal Risk.
• Experience and exposure to the delivery of the Business Continuity lifecycle (impact analysis, recovery strategy formulation, plan development, testing and exercising, governance and awareness related activities), engaging multiple stakeholders across the bank to fulfil value‑chain and business line requirements for the business resilience (BR) programme.

Skills

• Adopting Practical Approaches
• Articulating Information
• Challenging Ideas
• Conveying Self-Confidence
• Developing Expertise
• Documenting Facts
• Establishing Rapport
• Examining Information
• Following Procedures
• Interacting with People
• Managing Tasks
• Pursuing Goals
• Evaluating Risk Management Effectiveness
• Information Security
• Information Security Management
• Risk Acceptance
• Risk Identification
• Risk Response Strategy