Operational Risk Manager

Durban, South Africa | Posted on 08/28/2026

We offer comprehensive services in Recruitment(Permanent, Temporary, Fixed-term Contracts), Payroll Administration, and Labour Relations.

The Senior Manager:
Non-Financial Risk is responsible for supporting the Chief Risk Officer in establishing,implementing, enhancing and overseeing the Bank's Non-Financial Risk Management Framework.

The role serves as a key member of the Enterprise Risk Management function and provides independent second-line oversight, challenge and strategic guidance across operational andnon-financial risk disciplines, including Operational Risk, Operational Resilience,Business Continuity Management, Third-Party Risk, Information Security Risk,Information and Communication Technology (ICT) Risk, Digital Fraud Risk andother emerging risks.

The incumbent will work closely with business management, control functions and specialist risk teams to ensure thatnon-financial risks are effectively identified, assessed, monitored, managed and reported, while supporting the Bank's strategic objectives, operational resilience and regulatory obligations.

The role will also assist the CRO in providing senior management, Board committees and regulators with acomprehensive view of the Bank's non-financial risk profile and the effectiveness of related risk management practices.

Non-Financial Risk Strategy and Governance

• Support the CRO in developing and maintaining the Bank'sNon-Financial Risk Management Framework, policies, standards and methodologies.
• Drive the continuous enhancement of the Bank's non-financial risk management capabilities and maturity.
• Assist in the development and monitoring of risk appetite statements, tolerance levels, key risk indicators and governance reporting.
• Monitor emerging regulatory requirements, industry developments and evolving risk trends.
• Provide strategic advice and independent challenge to management regarding significant non-financial risk exposures and control weaknesses.
• Support the preparation of risk management papers and presentations for Executive Management, Board Committees and regulators.
• Oversee the implementation and ongoing effectiveness of the Operational Risk Management Framework.
• Coordinate and challenge Risk and Control Self-Assessments(RCSA), risk assessments and control effectiveness reviews across theBank.
• Oversee operational risk event and incident management processes, including root-cause analysis, lessons learned and remediation tracking.
• Monitor operational loss events, risk trends and control weaknesses and ensure material issues are appropriately escalated.
• Facilitate the development and monitoring of operational risk indicators and early warning metrics.
• Provide independent review and challenge regarding risk treatment plans and risk acceptance decisions.

Operational Resilience and Business Continuity

• Support the design, implementation and continuous enhancement of the Bank's Operational Resilience Framework.
• Lead the Bank's Business Continuity Management programme,including business impact assessments, continuity planning, testing and recovery exercises.
• Coordinate resilience assessments covering critical business services, key processes and material dependencies.
• Facilitate severe but plausible scenario analysis and resilience testing exercises.
• Monitor resilience vulnerabilities and support management in implementing corrective actions.
• Promote integration between operational risk management,business continuity, crisis management and technology resilience activities.

Information Security and ICT Risk Oversight

• Provide independent oversight and challenge of information security and ICT risk management practices.
• Review and assess material technology, cyber security and digital transformation initiatives from a risk perspective.
• Monitor significant technology and cyber security risk exposures and ensure timely escalation of material concerns.
• Support the assessment of technology resilience, information security controls and cyber preparedness.
• Ensure technology and information security risks are appropriately incorporated into the Bank's risk profile and governance reporting.

Third-Party Risk Management

• Oversee the implementation and effectiveness of the Third-Party Risk Management Framework.
• Review and challenge risk assessments relating to outsourcing arrangements, service providers and strategic partnerships.
• Monitor critical supplier dependencies, concentration risks and resilience capabilities.
• Ensure third-party risks are appropriately…