FirstRand Bank

Banking, corporate finance, and insurance group

IT Risk Analyst

Security Governance, Risk & CompliancePosted on Nov 13

Full-timeEzulwini, EswatiniNo salary listedIn-person

About the Job

Requirements

Keep up to date with legislative developments and advise stakeholders proactively.
Build strong stakeholder relationships and promote a sound risk culture while maintaining independence.

Responsibilities

Provide independent second-line oversight, specialist advice, and effective challenge over technology, cybersecurity, information security, data, cloud, and resilience risks.
Support implementation and maintenance of the Bank’s IT risk, cybersecurity, operational, and resilience frameworks.
Review IT and cyber policies and standards to confirm they remain current and aligned with FNB Eswatini and Group requirements.
Benchmark IT practices against the approved framework and drive improvement where gaps exist.
Review and challenge IT and cyber risk assessments and mitigation plans.
Provide independent risk input into technology projects, new products, and emerging technologies.
Assess the risk of significant system changes, upgrades, and migrations before they go live.
Monitor technology risk against approved appetite and tolerance levels and escalate breaches.
Test critical IT and cybersecurity controls and validate remediation.
Monitor cyber risk, vulnerabilities, incidents, and threat intelligence.
Independently challenge the response to major IT and cyber incidents, review root-cause and lessons-learned reports, and coordinate reporting to internal governance structures and regulatory bodies.
Oversee technology providers, disaster recovery, and continuity arrangements.
Support cyber and resilience scenario exercises and continuity testing.
Track incidents, audit findings, and regulatory requirements until they are closed.
Help the business develop key risk indicators and clear management reports.
Prepare and present technology risk reports to risk committees and senior management.
Deliver technology risk and cyber awareness training for staff.
Identify ways to improve efficiency and cost effectiveness without weakening controls.

Job Description

Provide independent second-line oversight, specialist advice and effective challenge over technology, cybersecurity, information security, data, cloud and resilience risks. The role helps management keep technology risk within approved appetite, comply with applicable laws, regulations and FNB Eswatini requirements, and ensure that technology-enabled activities are secure, resilient and aligned with the Bank’s strategy.

Support the implementation and maintenance of the Bank’s IT risk, cybersecurity, operational and resilience frameworks.
Review IT and cyber policies and standards to confirm they remain current and aligned with FNB Eswatini and Group requirements.
Benchmark IT practices against the approved framework and drive improvement where gaps exist.
Keep up to date with legislative developments and advise stakeholders proactively.
Review and challenge IT and cyber risk assessments and mitigation plans.
Provide independent risk input into technology projects, new products and emerging technologies.
Assess the risk of significant system changes, upgrades and migrations before they go live.
Monitor technology risk against approved appetite and tolerance levels and escalate breaches.
Test critical IT and cybersecurity controls and validate remediation.
Monitor cyber risk, vulnerabilities, incidents and threat intelligence.
Independently challenge the response to major IT and cyber incidents, and review root-cause and lessons-learned reports and coordinate reporting to internal governance structure and regulatory reporting.
Oversee technology providers, disaster recovery and continuity arrangements.
Support cyber and resilience scenario exercises and continuity testing.
Track incidents, audit findings and regulatory requirements until they are closed.
Help the business develop key risk indicators and clear management reports.
Prepare and present technology risk reports to risk committees and senior management.
Build strong stakeholder relationships and promote a sound risk culture while maintaining independence.
Deliver technology risk and cyber awareness training for staff.
Identify ways to improve efficiency and cost effectiveness without weakening controls.

#post

#fnb

#LI-MS7

Important Closing Date Note

Take note that applications will not be accepted on the below date and onwards, kindly submit applications ahead of the closing date indicated below.

20/11/26

All appointments will be made in line with FirstRand Group’s Employment Equity plan. The Bank supports the recruitment and advancement of individuals with disabilities. In order for us to fulfill this purpose, candidates can disclose their disability information on a voluntary basis. The Bank will keep this information confidential unless we are required by law to disclose this information to other parties.

About the Company

FirstRand Bank

Banking, corporate finance, and insurance group

FirstRand Bank is a large South African financial services group that combines three main divisions: FNB, RMB, and Momentum. FNB handles retail and commercial banking, RMB focuses on corporate and investment banking, and Momentum provides insurance. The company’s product lineup spans everyday banking and lending for individuals, corporate and investment banking services for businesses, and life and other insurance products. It differentiates itself by operating as a confederation of specialized divisions under one group, allowing each unit to focus on its core strengths while sharing the group’s financial backing. The goal is to deliver a broad, integrated set of financial services for retail customers, businesses, and insurers across the country and beyond.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Johannesburg, South Africa
Founded: 1838

Recently Posted Jobs

Explore more opportunities at FirstRand Bank

See more jobs