Senior Risk Officer Attachment Student To safeguard the confidentiality, integrity and availability of information/data handled by ZB Financial Holdings Information Technology systems, and also to ensure that there is business continuity in the event of a disaster 1. Ensures compliance and support of SWIFT setup.
2. Formulates an IT Security Policy for the Group and constantly reviews it to match best practice in the industry.
3. Trains users and ensures they are aware of the Group IT Security Policy and other related policies so as to foster a good and safe computing culture in the Group. 
4. Provides IT Security advisory to IT related committees and Boards.
5. Plans and coordinates Group IT Ehancement Committee meetings.
6. Conducts IT Risk assessments and reporting for the Group. 
7. Participates in all IT Projects and ensures IT security issues are part of any system requirements and that the delivered systems meet the minimum security requirements. 
8. Ensures all IT systems implement segregation of duty principles.
9. Researches on latest IT security standards and recommends for implementation in the Group and participates in the implementation programmes i.e. ISO 27001/2, PCI DSS etc.
10. Provides the required information for audits and RBZ inspections as well as management comments for the reports. Ensures recommendations are implemented.
11. Monitors usage of IT systems for compliance through logs and report reviews.
12. Participates in tender adjudication in the procurement of IT systems and related technology.
13. Ensures an independent organisation is engaged to perform the test and IT Security assessment on an annual basis. Ensures reported weaknesses/vulnerabilities are fixed.  
14. Formulates an IT Security Policy for the Group and constantly review it to match best practice in the industry.
15. Performs any other duties as assigned by superior.
 Weekly report
Board IT Risk report
 Phone to check on progress
Meetings
Review of assigned tasks
 1. Submits quarterly Risk Board Report for Group IT
2. Conducts user awareness training workshops and circulars - quarterly and as and when required. Plans for own training and workshops both internal and external.
3. Ensures the Group has at least one DRP simulation per year and documents results for inspection by the regulator or Assurance teams.
4. Ensures policies are updated as and when significant changes have taken place in the operating environment or as per best practice requirement
5. Plans for IT areas, systems and logs to be reviewed i.e. daily, monthly and quarterly 
6. Plans for participation in on-going IT Projects, this might be very hectic given that we have many projects running at the same time
7. Monitors other areas for compliance issues i.e. license renewals and management.
8. Prepares and presents for Group Business Risk's annual budget and other general administration tasks for Group Business Risk
  B.Sc. Computer Science  Certification: Certified Information Security Manager (CISM),Certification: Certified Information Systems Auditor (CISA 4 years  Must be able to manage databases
 Must be able to manage and configure networks
 Must be able to work with very minimal supervision
 Must be a team player
 Must have strong interpersonal skills
 Decides on how to execute duties as a Swift Security Officer
 Decides what management comments to write in an Audit report
 Decides on which systems and areas to monitor for compliance
 Decides on how to resolve any security issue reported on systems
 Decides on what risk items to report on after an assessment i.e. Group IT Quarterly Risk Assessment Board Report
 Ensuring compliance by users to the general IT Security Policy
 Ensuring settings compliance for IT systems already in use in the Group
 Review of logs for all systems in use in the Group
 Activating audit trail on Bank Fusion system in the given environment i.e. equipment and configuration


Job evaluation subgrade: C