Information Risk & Business Resilience Manager

About the Role

The Information Risk & Business Resilience Manager provides independent second-line oversight, advisory, challenge, and monitoring across the overlapping risk domains of Information Risk, Data Privacy, Business Resilience, Technology Risk, and Cyber Risk. The role supports the Head of Non-Financial Risk by localising Group frameworks and standards, embedding risk appetite, facilitating risk assessments and scenario analysis, coordinating assurance and remediation, and producing integrated risk insights for management and governance committees.

This is a strategic second-line risk position for an experienced professional with the ability to translate complex and interconnected risk themes into actionable insights and governance outcomes. The role requires a strong balance of technical credibility, business pragmatism, and stakeholder influence to support growth ambitions while maintaining robust protection of clients, information assets, technology infrastructure, critical services, and regulatory confidence.

Key Responsibilities

• Provide independent second-line oversight, advisory, challenge, and monitoring across Information Risk, Data Privacy, Business Resilience, Technology Risk, and Cyber Risk.
• Support the Head of Non-Financial Risk by localising Group frameworks and standards, embedding risk appetite, facilitating risk assessments and scenario analysis.
• Coordinate assurance and remediation, and produce integrated risk insights for management and governance committees.
• Enable, challenge, and monitor business and technology risk owners to ensure risks are identified, assessed, treated, reported, and escalated within risk appetite.

Qualifications & Requirements

• Education: First Degree in Information Technology, Computer Science, Information Risk Management, Information Security, Business, Commerce, Law, Finance, Audit, or related discipline.
• Certifications: At least one relevant professional/technical certification preferred (e.g., CISA, CISM, CRISC, CISSP, ITIL, ISO 22301, ISO 27001, Certified Data Protection Officer, or equivalent).
• Experience: 7–8 years of experience.
• Demonstrable experience in at least three of the following domains: Information Risk, Data Privacy, Business Resilience, Technology Risk, Cyber Risk, Operational Risk, IT Audit, Technology Governance, or Business Continuity.
• Strong understanding of Non-Financial Risk as a second-line function.
• Ability to interpret Group standards and regulatory expectations into practical country implementation actions.
• Strong governance writing capability (preparing committee-ready risk commentary, issue escalation notes, executive summaries).
• Strong analytical capability and attention to detail (working with dashboards, risk registers, incident data, audit findings, action trackers).
• Ability to influence senior stakeholders and provide constructive challenge.
• High integrity, confidentiality, independence, professional scepticism, and sound judgement.
• Working knowledge of risk systems and collaboration tools (GRC platforms such as Risk Market Place, MS Excel, PowerPoint, Word, Teams).

Competencies

• Behavioural: Articulating Information, Developing Expertise, Documenting Facts, Examining Information, Following Procedures, Interacting with People, Managing Tasks.
• Technical: Evaluating Risk Management Effectiveness, Information Security, Information Security Management, Cyber and Technology Risk Oversight, Analytical Skills, Risk Response Strategy.

How to Apply

Interested and qualified candidates can apply online directly through the Standard Bank Group Application Page.