The purpose of this position is to realise the responsibilities of the Prudential Authority (PA) in respect of the supervision and regulation of IT risk in insurance entities. The successful candidate will be involved in operational duties associated with on and off-site analysis and will be part of a team of risk specialists in the PA who are responsible for providing specialist knowledge, skills, and experience in the information technology risk management area.

Detailed description
The successful candidate will be responsible for, among others, the following key performance areas:
Supervision
Participating in supervisory reviews and practices (on and off-sites) in relation to information technology risk in PA regulated insurers as well as support colleagues with PA regulated banks and market infrastructures, including inspecting risk appetite and management practices with respect to information technology and information technology risk.
Determine whether financial entities have established appropriate information technology frameworks, policies and processes that address areas such as information security and system development and have made investments in information technology commensurate with the size and complexity of operations.
Ensuring regulated entities’ compliance with regulations governing information technology risk.
Support other risk teams, including the Operational Risk, Credit Risk and Market Risk divisions with
supervisory duties with regards to IT related elements.
Research and develop regulation and methods to analyse and interpret information technology risk based information.
Monitoring regulated entities’ exposure to information technology risk, as reported to the PA under the various operational risk approaches.
Input and possible participation in Own Risk Self Assessments (ORSA) of regulated entities in relation to information technology risk.
Providing technical information technology risk specialist support and guidance (SME).
Assist with the development, analysis and interpretation of information technology / information technology risk assessments, surveys, and questionnaires.
Contributing to risk-based meetings with regulated entities and their auditors.
Informing the PA of the aggregate behaviour of regulated entities with regard to information technology risk

Staying abreast of international best practice and developments surrounding information technology risk matters to benchmark and implement locally.
Develop and present training material throughout the PA relating to information technology / information technology risk matters.
Supporting the Manager: Information Technology Risk with regard to all information technology risk matters.
Job requirements
To be considered for this position, candidates must have:
A degree in Information Technology, Informatics, Risk Management.
Honours degree in any specified fields will be an added advantage.
Applicable information technology risk management experience.
Between 5 to 8 years’ relevant working experience in the Insurance, banking, or financial sector.
The following would be an added advantage:
Further postgraduate qualifications in any of the and / or CISA, CGEIT, CISM, CRISC or equivalent
certifications.
COBIT knowledge and experience.
Project / IT project management.
Knowledge of the best practice frameworks at both theoretical and practical level.

Additional requirements are as follows:
Knowledge of, and experience in; the insurance, banking, or financial market infrastructure systems; financial, insurance and banking products; regulations, and technology systems used in the various financial sectors with particular emphasis on IT / IT risk matters.
Knowledge and understanding of information technology / information technology Risk Frameworks e.g., NIST, COBIT, ISO 27001, ITIL, ISO 31000, ISO 38500 and further developments in this space.
Information technology / information technology Risk Audits and or Quality Assurance.
Knowledge and understanding of the risk’s banks, insurance, and financial market infrastructures face.
Competence in basic office information technologies.
Ability to work in a team and contribute to team success.
Reliable own transport as the position requires regular travel between the PA’s offices in Pretoria and the offices of banks, insurance entities and financial market infrastructures which are generally outside Pretoria