Vacant Job For IT Control Officer at Stanbic IBTC Bank, 23rd August, 2018

Stanbic IBTC Bank is a leading African banking group focused on emerging markets globally. It has been a mainstay of South Africa's financial system for 150 years, and now spans 16 countries across the African continent. Standard Bank is a firm believer in technical innovation, to help us guarantee exceptional client service and leading edge financial solutions. Our growing global success reflects our commitment to the latest solutions, the best people, and a uniquely flexible and vibrant working culture. To help us drive our success into the future, we are looking for resourceful individuals to join our dedicated team at our offices. We are recruiting to fill the position below:     Job Title: IT Control Officer - SIPML Job ID: 33656 Location: Lagos Island Job Sector: Banking Job Purpose

• Develop relationships in order to maintain / establish efficient and robust operating models across all IT Department.
• Expected to build a strong IT control environment to ensure zero level of policy, procedures and regulatory infractions and zero tolerance for control gaps,  reviewed / unauthorized transactions and income leakages
• This is an internal function which will drive the framework, oversight and monitoring of the controls environment in SIPML.
• Work as an internal consultant to IT Department, to manage the Company’s assets through effective IT risk management and control systems with an ultimate aim to mitigate risk in transactions and the IT underlying processes
• Mitigate operational risk through a number of controls and monitoring processes.
• Manage relationship with stakeholders such as Internal Audit, Compliance, Operational Risk, IT, Business Management, amongst other Business Units within the Company.

• To support the Business and strengthen the IT control environment by introducing new initiatives toward achieving an effective IT control system within the Company.
• Perform analysis on IT procedures/processes by reviewing the departmental working manual to identify process gaps and provide value adding recommendations.
• Carry out periodic reviews of users & super user/administrator activity logs on the core applications and Active Directory (AD)
• Perform review of the change management logs, test reports and attending change management meetings
• Manage Logical Access on the company’s applications. This includes creation of users’ account, role modification, disabling of users’ account and password reset.
• Perform servers, database and operating system reviews.
• Perform periodic restoration and verification of application backup tapes to ascertain the authenticity & integrity of the selected tape and data.
• Perform periodic review and monitoring of endpoint security (antivirus, data leakage prevention, etc.)
• Conduct periodic review of the Data Centre biometrics access logs to ascertain that only authorized users gained access to the Data Centre and periodic inspection of the Data Centre to ensure that the facility and equipment are properly used and maintained in line

• Process documentation , review & alignment
• Continuous review and improvement of work processes within the unit.
• Resolution of IT audit issues
• Prompt rendition of weekly reports with minimal error
• Improved IT control environment through continuous and high level engagement
• Satisfactory rating in the Audit reviews and Internal Service Survey (ISS).
• Ensure quality and improvement in Business Unit audit and risk assurance reports.

• Conduct follow up audits to monitor management’s interventions
• Maintain open communication with management and audit committee
• Obtain, analyze and evaluate IT documentations, previous reports, data, flowcharts etc

• Ensure that the company’s core values are adhered.
• Provide guidance on acceptable business culture and reputation

• Carries out proper engagements for fact finding
• Creates awareness on risks and conducts
• Recommends appropriate consequence management actions

• Description or examples:Maintain close contact with all internal stakeholders within the Wealth sectors and GIC

• Influence their service delivery
• Description or examples:Approval and contribution to Policies

• Influence their decision making
• Description or examples: Contributes to industry initiatives like training

• Manage the relationship
• Description or examples: Gets customers for the business and assists in managing some and difficult situations

• First Degree Field of Study – Computer Science/Engineering
• Other qualifications -Certifications or professional memberships CISA/CRISC/CISM
• Advanced /Professional Degree or Professional Qualification in IT Audit/Control is required.

• Risk Management,Business Support
• Understand IT operations and improve overall experience
• Independent Assurance - Internal Audit and Controls
• Minimum of 2 years IT Governance experience
• Information Technology - Internal Audit and Controls
• Minimum of 2 years experience

• The ability to develop control improvements required to mitigate the risks or control failures identified during internal audit reviews.

• Knowledge of standards required in managerial and financial auditing, to identify exceptions to control procedures and standards, and develop specific solutions or recommendations.

• The ability to conduct investigations and gather evidence where cases of fraud (internal or external) are reported or suspected.

• The ability to interpret regulations and laws that apply to the business and to provide information to business on how to comply