Overview

Third Party Risk Manager Jobs in Bellville, South Africa at Sanlam

CAREER OPPORTUNITY

Santam Group has a career opportunity for a Third-Party Risk Manager in the Santam Technology Services (STS) department which will be based at Santam Head Office in Bellville in the Western Cape.

KEY RESPONSIBILITIES

The primary responsibility of the Third-Party Risk Manager:

  • Implement the Third-Party Governance and Risk Management Framework in alignment with the System of Governance for IT across the Santam Group.
  • Assist in designing and implementing policies, standards, and procedures to protect sensitive data and ensure operational continuity.
  • Identifying, monitoring and responding to third-party incidents and risks, and advising management on mitigation strategies.
  • Assist with the preparation of the Santam Group IT Governance, Risk and Information Security Report for the Santam Risk Committee and Board.
  • Prepare the Third-Party IT-related risks
  • Conduct regular training and awareness sessions (in person, virtual or training material) regarding third-party risk management and the roles the various parties play in the management of IT Risk at third parties.
  • QUALIFICATIONS AND EXPERIENCE

  • Relevant Bachelor’s Degree, . (Information Systems)
  • CISA / CRISC or CCSP or similar certification
  • 3 to 5 years of IT Audit / IT Risk Management / Third-Party Risk Management work experience
  • Solid technical skills around IT and cybersecurity controls.
  • COMPETENCIES

    Influence and Communication:

  • Stakeholder Engagement:
    Skill in engaging and building rapport with stakeholders at all levels, effectively communicating third-party IT risk management concepts and concerns.
  • Persuasion:
    Promoting a risk-conscious culture across the organisation.
  • Collaboration and Teamwork:

  • Cross-Functional Collaboration:

    Proficiency in collaborating with diverse teams, including IT, legal, compliance, and the business units.

  • Build Partnerships:
    Building partnerships and working collaboratively with others to meet shared objectives.
  • Team Leadership:
    Ability to lead, motivate, and manage the various teams, fostering a collaborative and high-performance work environment. Be a team player and willingness to assist others as well as ability to work independently.
  • Adaptability and Continuous Learning:

  • Adaptability:
    Ability to adapt to change and challenges. Ability to rebound from setbacks and adversity when facing difficult situations.
  • Continuous Improvement:
    Eagerness to stay updated with trends and a commitment to ongoing self-improvement.
  • Learning Agility:

  • Curiosity and Open-Mindedness:
    Demonstrating a willingness to learn, adapt, and explore new concepts.
  • Cultural Influence and

    Education:

  • Education and Training:
    Capability to educate employees about risks, fostering a culture of risk awareness.
  • Regulatory and Compliance Knowledge:

  • Regulatory Awareness:
    Understanding of relevant legislation that has a bearing on IT matters, industry regulations, and compliance requirements relevant to the organization’s industry.
  • Conflict Resolution and Negotiation:

  • Conflict Management:
    Skill in resolving conflicts and disagreements constructively.
  • Negotiation:
    Ability to negotiate with stakeholders to balance risk-based requirements with business requirements.
  • ADDITIONAL COMPETENCIES AND SKILLS

    Technical Proficiency:

  • Risk Assessment:
    Proficiency in conducting thorough IT risk assessments, identifying weaknesses, and evaluating potential risks.
  • Technical Compliance:
    Strong understanding of industry standards, regulations, and best practices such as Cobit, ISO 27000 series, applicable Joint Standards, ITIL and King IV
  • Report Writing:
    Excellent report writing skills

  • Presentations:
    Proficiency in building PowerPoint decks to assist in conveying key messages
  • Risk Expertise:

  • Risk Management:

    Skill in assessing and prioritising risks, as well as developing and implementing risk mitigation strategies.

  • Communication and

    Collaboration:

  • Stakeholder Engagement:
    Strong communication skills to engage with executives, technical teams, and non-technical stakeholders about risk matters.
  • Cross-Functional Collaboration:

    Ability to collaborate with IT, legal, compliance, and business teams to integrate security practices across the organization.
    Problem Solving and Decision Making:

  • Analytical Thinking:
    P…
  • Title: Third Party Risk Manager

    Company: Sanlam

    Location: Bellville, South Africa

    Category:

     

    Upload your CV/resume or any other relevant file. Max. file size: 800 MB.