ICT Risk Projects Officer

Co-operative Bank

Here is an exciting opportunity for you to join our ICT Risk & Control team. Are you able to identify and assess threats, put plans in place ‘if things go wrong’ and advise how to avoid, reduce or transfer risks in an IT environment, then this is the perfect career move for you.

Reporting to the Head – ICT Risk & Control, the role holder will provide continuous Project assurance on the various Bank’s ICT related projects as regards confidentiality, integrity and availability of the IT infrastructure, processing systems and related resources in line with the Bank Information Security Policy.

Responsibilities

• Be actively involved and provide risk & security guidance during technology projects, systems deployment, upgrades and changes.
• Proactively provide ICT security & risk requirements for incorporation in Business Requirements Documents, Functional Specifications Documents & RFPs of new ICT systems.
• Proactively participate in technical solution design for new systems, ensuring that security requirements are well defined.
• Perform vulnerability assessments & penetration tests on new Bank systems, applications and technology, identifying vulnerabilities and recommendations on closure of these vulnerabilities, prior to new systems go-live.
• Perform a fraud risk assessment on new systems and processes within the project scope and provide recommendations on countermeasures to be taken.
• Ensure interfaces for new systems are secured from intrusion, and user activities in new systems are detailed, traceable and logged.
• Pro-actively provide guidance on security tools required to effectively manage and control Bank systems.
• Pro-actively perform risk assessments for ongoing ICT projects and prepare risk reports for new systems & projects in readiness for Change Approval Board meetings.
• Proactively develop and constantly review system Minimum Baseline Security Requirements for new ICT systems & projects.
• Regularly provide recommendations to ICT leadership on areas of improvement towards securing ICT systems.
• Provide information security training & awareness to ICT systems project teams (Systems development teams, project managers, business analysts)
• Maintain ICT risk registers for ICT projects and submit periodical and ad-hoc reports as required by HOD and Chief Risk Officer.
• Ensure strict adherence to all regulations, statutes, standards, practices and all internal processes and procedures as per the relevant manuals and comply with all relevant external legislation and regulations with regard to compliance requirements.

Qualifications