IT Risk Analyst

About the role

Provide independent second-line oversight, specialist advice and effective challenge over technology, cybersecurity, information security, data, cloud and resilience risks. The role helps management keep technology risk within approved appetite, comply with applicable laws, regulations and FNB Eswatini requirements, and ensure that technology-enabled activities are secure, resilient and aligned with the Bank's strategy.

• Support the implementation and maintenance of the Bank's IT risk, cybersecurity, operational and resilience frameworks.
• Review IT and cyber policies and standards to confirm they remain current and aligned with FNB Eswatini and Group requirements.
• Benchmark IT practices against the approved framework and drive improvement where gaps exist.
• Keep up to date with legislative developments and advise stakeholders proactively.
• Review and challenge IT and cyber risk assessments and mitigation plans.
• Provide independent risk input into technology projects, new products and emerging technologies.
• Assess the risk of significant system changes, upgrades and migrations before they go live.
• Monitor technology risk against approved appetite and tolerance levels and escalate breaches.
• Test critical IT and cybersecurity controls and validate remediation.
• Monitor cyber risk, vulnerabilities, incidents and threat intelligence.
• Independently challenge the response to major IT and cyber incidents, and review root-cause and lessons-learned reports and coordinate reporting to internal governance structure and regulatory reporting.
• Oversee technology providers, disaster recovery and continuity arrangements.
• Support cyber and resilience scenario exercises and continuity testing.
• Track incidents, audit findings and regulatory requirements until they are closed.
• Help the business develop key risk indicators and clear management reports.
• Prepare and present technology risk reports to risk committees and senior management.
• Build strong stakeholder relationships and promote a sound risk culture while maintaining independence.
• Deliver technology risk and cyber awareness training for staff.
• Identify ways to improve efficiency and cost effectiveness without weakening controls.
• #post
• #fnb
• #LI-MS7
• Important Closing Date Note

Take note that applications will not be accepted on the below date and onwards, kindly submit applications ahead of the closing date indicated below.

20/11/26

All appointments will be made in line with FirstRand Group's Employment Equity plan. The Bank supports the recruitment and advancement of individuals with disabilities. In order for us to fulfill this purpose, candidates can disclose their disability information on a voluntary basis. The Bank will keep this information confidential unless we are required by law to disclose this information to other parties.