IT Risk Analyst

• Support the implementation and maintenance of the Bank’s IT risk, cybersecurity, operational and resilience frameworks.
• Review IT and cyber policies and standards to confirm they remain current and aligned with FNB Eswatini and Group requirements.
• Benchmark IT practices against the approved framework and drive improvement where gaps exist.
• Keep up to date with legislative developments and advise stakeholders proactively.
• Review and challenge IT and cyber risk assessments and mitigation plans.
• Provide independent risk input into technology projects, new products and emerging technologies.
• Assess the risk of significant system changes, upgrades and migrations before they go live.
• Monitor technology risk against approved appetite and tolerance levels and escalate breaches.
• Test critical IT and cybersecurity controls and validate remediation.
• Monitor cyber risk, vulnerabilities, incidents and threat intelligence.
• Independently challenge the response to major IT and cyber incidents, and review root-cause and lessons-learned reports and coordinate reporting to internal governance structure and regulatory reporting.
• Oversee technology providers, disaster recovery and continuity arrangements.
• Support cyber and resilience scenario exercises and continuity testing.
• Track incidents, audit findings and regulatory requirements until they are closed.
• Help the business develop key risk indicators and clear management reports.
• Prepare and present technology risk reports to risk committees and senior management.
• Build strong stakeholder relationships and promote a sound risk culture while maintaining independence.
• Deliver technology risk and cyber awareness training for staff.
• Identify ways to improve efficiency and cost effectiveness without weakening controls.

#LI-MS7