IT Risk Analyst (CH1189)

Our client, in the financial services industry, is looking for an IT Risk Analyst to join their IT Services team  in their Pretoria office.

The IT Risk Analyst works closely with Head of Information Technology system and management team and is responsible for identifying, assessing, and monitoring technology-related risks within the organization. This role also assists ensures that IT systems, processes, and controls comply with regulatory requirements and internal policies, while supporting risk mitigation strategies to safeguard information assets.

 Reports To: Head of IT Services 

Qualifications and Experience

Qualifications

• Bachelor’s degree in information technology, Computer Science, or related field.
• Preferred Certifications
  • CRISC (Certified in Risk and Information Systems Control)
  • CISA (Certified Information Systems Auditor)
• 3+ years of experience in IT risk management, Cyber security, IT audit, or IT governance.
• Knowledge of risk frameworks (NIST, COBIT, etc.) and regulatory compliance.

Skills & Experience

• Hosting and infrastructure: Knowledge and experience in IT infrastructure, networking protocols, cloud service models, core fundamentals and virtualisation
• Cybersecurity Fundamentals: Knowledge and experience in security principles, risk management, and compliance standards.
• Data Integrity & Backup: Knowledge and experience of assessing data risks and mechanisms for preventing corruption and ensuring successful data backup and recovery.
• Systems development: Knowledge and experience of Agile frameworks (Scrum, Kanban) and DevOps practices and tools.
• Regulatory and Risk frameworks: Knowledge of risk frameworks (NIST, COBIT, etc.) and regulatory environment

Key Responsibilities

• Risk Identification & Assessment:
  • Conduct regular IT risk assessments across systems, applications, and infrastructure.
  • Identify potential threats, vulnerabilities, and control gaps.
• Risk Monitoring & Reporting:
  • Maintain and update the IT risk register.
  • Prepare risk reports and dashboards for IT management and governance committees.
• Control Evaluation:
  • Conduct regular IT control reviews and monitors to ensure effectiveness and compliance.
  • Recommend improvements to strengthen internal controls.
• Compliance & Governance:
  • Ensure adherence to regulatory frameworks (e.g., POPIA, GDPR, NIST).
  • Support internal and external audits by providing risk-related documentation.
• Security Incident & Issue Management:
  • Assist in investigating IT security incidents and control failures.
  • Track remediation plans
    
    https://www.executiveplacements.com/Jobs/I/IT-Risk-Analyst-CH1189-1241945-Job-Search-11-25-2025-02-00-14-AM.asp?sid=gumtree