Senior Analyst, IT Risk Management at First Bank

Job Objective(s)

• Assist to identify non-conformance and assure remediation, mitigation and/or positive acceptance of risk
• Assist in managing all risks associated with the use, ownership, operation, involvement, influence and adoption of IT within FirstBank.

Duties & Responsibilities

• Define a formal set of processes by which the organization identifies, measures, controls, and reports on relevant risks and reports
• Maintain the IT Disaster Recovery Plan including annual reviews
• Oversee the regular testing of the plan and update for major changes in hardware, applications, business and regulatory requirements accordingly.
• Work with team lead to effectively communicate the nature and criticality of risks to the highest levels of the business
• Work with team to schedule audits and update and monitor the audit programme report. Review the audit responses and issue the assurance programme reports
• Respond to Audit. Establish the audit response team. Host the audit and respond to the outcomes
• Establish Assurance Management standards to cover client/external requirements
• Ensure that all IT policies and procedures are compliant with regulatory requirements
• Serve as liaison to auditors, consultants, and the bank Compliance Committee regarding documentation and review of information compliance.
• Ensure that relevant process owners are assigned and are responsible for creation, maintenance and testing of their BC & DR plans and that a central plan exists within the organization to coordinate these efforts
• Manage resources (people, hardware & software) to ensure that redundancy is available as necessary
• Identify, analyze, and evaluate business continuity risks to help prioritize and guide appropriate mitigation efforts
• Participate in IT projects and initiatives to bring pro-active risk management focus into solutions

Job Requirements
Education:

• Minimum of a first Degree or its equivalent in a Business / IT related discipline
• Masters, MBA or a recognized professional certification will be an added advantage

Experience:

• 5+ years of experience in technology/ information security management
• 1+ years of management experience