Information Risk & Business Resilience Manager

About the role

Standard Bank Group is seeking an experienced Information Risk & Business Resilience Manager to provide independent second‑line oversight across Information Risk, Data Privacy, Business Resilience, Technology Risk and Cyber Risk. You will work closely with the Head of Non‑Financial Risk to translate group frameworks into practical actions and deliver integrated risk insights to senior governance bodies.

Key responsibilities

• Localise and embed Group risk frameworks, standards and appetite within the country context.
• Facilitate risk assessments, scenario analysis and assurance activities for information and technology risks.
• Coordinate remediation plans and monitor implementation by first‑line owners.
• Produce consolidated risk reporting for management committees and regulatory bodies.
• Challenge and advise business and technology owners on risk treatment and escalation.

Required profile

• 7‑8 years of experience in a second‑line risk function, preferably within banking or financial services.
• Demonstrated expertise in at least three domains such as Information Risk, Data Privacy, Business Resilience, Technology Risk, Cyber Risk, Operational Risk, IT Audit or Business Continuity.
• Ability to interpret group standards and regulatory expectations and implement them locally.
• Strong governance writing and stakeholder influence skills.

Required skills

• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Systems Security Professional (CISSP)
• ITIL certification
• ISO 22301 and ISO 27001 knowledge
• Data Protection Officer certification or equivalent