Job Description

Introduction

Through our client-facing brands Metropolitan and Momentum, with Multiply (wellness and rewards programme), and our other specialist brands, including Guardrisk and Eris Property Group, the group enables business and people from all walks of life to achieve their financial goals and life aspirations. We help people grow their savings, protect what matters to them and invest for the future. We help companies and organisations care for and reward their employees and members. Through our own network of advisers or via independent brokers and utilising new platforms Momentum Metropolitan provides practical financial solutions for people, communities, and businesses.

Disclaimer

As an applicant, please verify the legitimacy of this job advert on our company career page.

Role Purpose

Executing the Technology and Digital risk management for the Momentum Health Solutions business (including Momentum Health Corporate) .

Requirements

#

Qualification

Matric or Equivalent
Relevant IT Tertiary education
CISA Certification
CRISC Certification is preferable
#

Experience

5 or more years of experience in Enterprise Risk Management, Compliance and Audit
Minimum of 3 - 5 years IT, IT Audit or Information security risk management experience
Minimum of 3 - 5 years of experience in a management or supervisory role
Proven experience and understanding of Cyber and IT security practices
Proven experience and understanding of IT projects risk management
Working in a short-term insurance or health environment (advantageous)

Duties & Responsibilities

#

Internal Process

Providing guidance to IT Management on effective IT risk management standards, approaches and treatment
Accountable for identifying, evaluating, and reporting on risk controls in a manner that meets compliance, and government regulations
Identify weaknesses in the technology control environment and ensure business remedial actions
Technology Control Assessment and associated remediation, including running health check audits
Ensure implementation of and alignment to Group IT Risk management strategy and initiatives
Ensure implementation of Group IT Risk management strategy and initiatives. that the Information Security within MHS adopt adequate security and control tooling, solutions
Facilitate risk working groups to help promote and champion the IT operational risk agenda across the group and help enhance the overall risk culture
Support standardisation of risk controls, risk management processes and procedures, and ensure adherence to company policy and procedures
Responsible for Monitoring and reporting on remediation actions and programs addressing technology risks
Accountable for IT risk management program (strategic and operational)
Provide oversight on the IT Risk Officer facilitated IT risk assessments and risk management processes
Manage the ISAE3402 for MHS for all for main IT platforms (Reflections, Isquare, O2 and Oracle)
Provide oversight on the IT Risk Officer work which will include facilitation of the ISAE3402, Logical Access Reviews across all platforms, tracking of audit findings (both internal and external) and IT controls weaknesses identified by management or through risk assessments or compliance monitoring
Assist management in their identification and management of risks for Strategic IT (e.g., migrations and take-ons) and Digital projects
#

Client

Build and maintain relationships with clients and internal and external stakeholders
Deliver on service level agreements applicable to clients and internal and external stakeholders in order to ensure that client expectations are managed
Make recommendations to improve client service and fair treatment of clients within area of responsibility
Participate and contribute to a culture which builds rewarding relationships, facilitates feedback and provides exceptional client service
Continuously monitor turnaround times and quality standards and resolve issues speedily to enhance client service delivery
Drive client service delivery goal achievement in line with predefined standards in order to ensure that clients receive appropriate advice and after sales service
Manage client query processes and ensure that queries are tracked, accurately resolved and used as a mechanism to improve client service and business processes
#

People

Build strong relationships through providing specialist know-how and leadership to others, expressing positive expectations
Continuously develop own expertise in terms of industry and subject matter development and application thereof in an area of specialisation
Positively influence and manage change and offer specialist support where required
Contribute to continuous innovation through the development, sharing and implementation of new ideas and involvement of colleagues and staff
Participate and contribute to a culture of work centric thinking, productivity, service delivery and quality management
Take ownership for driving career development
#

Finance

Contribute to the development of area specific budgets to minimise expenditure, in alignment with operational plans
Identify solutions to enhance cost effectiveness and increase operational efficiency
Implement and provide input into governance processes, systems and legislation within area of specialisation
Escalate unresolved policy and governance compliance issues via appropriate channels for investigation and resolution purposes
Provide input into the risk identification processes development and communicate recommendations in the appropriate forum

Competencies

Business Acumen
Client/ Stakeholder Commitment
Drive for Results
Leads Change and Innovation
Collaboration
Impact and Influence
Self-Awareness and Insight
* Diversity and Inclusiveness