IT Risk Specialist / Risk Officer

About the role

This role at FNB, based in Johannesburg, calls for a dedicated IT Risk Specialist to bolster the bank's technology risk management capabilities. The core function is to provide expert advisory, oversight, and governance support, ensuring technology risks are identified, assessed, monitored, mitigated, and reported.

Key responsibilities

• Conduct thorough risk assessments across IT domains including applications, infrastructure, projects, third‑party engagements and daily operations.
• Evaluate impact and severity of identified risks, determine inherent and residual risk exposure, and assess the effectiveness of existing controls.
• Collaborate with management to develop and track remediation plans for identified risks and control weaknesses.
• Prepare and deliver IT risk reports and participate in governance activities such as Change Advisory Boards, steering committees and new product approvals.
• Monitor IT risk indicators, analyse trends, and provide actionable recommendations for improvement.
• Review and recommend updates to IT policies, standards, procedures and risk frameworks to ensure compliance with regulatory and internal requirements.
• Provide risk oversight for IT projects and major changes, including assessing disaster recovery and business continuity plans.

Required profile

• 3–5 years of experience in IT risk, audit or operational risk, preferably within the financial services sector.
• Demonstrated ability to conduct risk assessments, evaluate controls and develop remediation plans.
• Experience with technology risk governance frameworks and regulatory compliance requirements.
• Strong analytical skills to monitor risk indicators, analyse trends and produce risk reports.
• Experience working with third‑party risk and IT project risk oversight is a plus.