Information Risk Manager

My Career Development Portal: Wherever you are in your career, we are here for you. Design your future. Discover leading-edge guidance, tools and support to unlock your potential. You are Absa. You are possibility.

Job Summary

• Act as the primary Information Risk Management (IRM) lead for Seychelles, providing subject matter expertise and guidance to business and support functions.
• Implement and embed Information Risk policies, standards, frameworks, and governance requirements across the organisation.
• Maintain oversight of the information risk profile, ensuring key risks, control weaknesses, audit findings, risk events, and remediation actions are effectively identified, managed, escalated, and closed within agreed timelines.
• Drive achievement of Information Risk objectives, including Risk and Control Assessments (RCAs), Control Self-Assessments (CSAs), Key Risk Indicators (KRIs), Risk Events, Risk Appetite metrics, and regulatory requirements.
• Support and coordinate assurance, audit, and compliance reviews, ensuring timely remediation of identified issues.
• Provide risk input into business initiatives, projects, and change programmes to ensure risks are appropriately assessed and mitigated.
• Analyse the effectiveness of information risk processes, controls, reporting, and governance mechanisms, recommending improvements where required.
• Represent Information Risk Management at relevant governance forums, committees, and stakeholder engagements.

• Act as the Information Security and Logical Access Management (LAM) subject matter expert for Seychelles.
• Ensure alignment with Group Information Security policies, standards, and control requirements.
• Provide risk and security oversight for projects, systems, applications, and business initiatives to safeguard information assets.
• Ensure appropriate access management controls, including user provisioning, role design, segregation of duties, joiner/mover/leaver processes, access recertification, and deprovisioning controls.
• Monitor information security and access management risks, control deficiencies, and audit findings, ensuring timely remediation and escalation where required.
• Provide specialist advice on information security, cyber risk, and access management matters across the business.

• Implement and monitor governance frameworks for Data Quality, Records Management, Data Classification, and End User Computing (EUC).
• Ensure relevant standards, processes, and reporting requirements are embedded and effectively communicated across the business.
• Monitor compliance with established controls and governance requirements, escalating material issues where necessary.
• Work with business stakeholders to strengthen data quality, information management, and record retention practices.
• Facilitate periodic reporting and oversight activities to support effective governance and regulatory compliance.

• Act as the primary Data Privacy subject matter expert for the business and support compliance with applicable privacy legislation, regulatory requirements, policies, and standards.
• Drive implementation and operationalisation of privacy controls across the organisation.
• Support the management, escalation, investigation, and reporting of privacy incidents and breaches.
• Provide privacy risk advisory support to business areas, projects, third-party engagements, and change initiatives.
• Support conduct privacy oversight, monitoring, assurance activities, and risk assessments to ensure ongoing compliance.
• Collaborate with Compliance, Service Technology, Data Management, and other relevant stakeholders to strengthen privacy and data protection controls.
• Report on privacy risks, incidents, key metrics, and regulatory compliance obligations.

• Support the Head of Governance & Control in the development, implementation, and alignment of Information Risk Management strategies and objectives.
• Build and maintain effective relationships with business leaders, risk teams, regulators, auditors, and regional stakeholders.
• Provide strategic advice on emerging information risk, technology, security, privacy, and data management trends.
• Prepare, review, and present management information, risk reports, metrics, and governance updates to relevant stakeholders and committees.
• Ensure timely and accurate completion of all Information Risk reporting and regulatory requirements.

Education