Analyst - Enterprise Risk Management
MTN Nigeria
lagos, NG
4d ago
source : Mrjobsnaija

MTN Nigeria's job vacancy, Career and Recruitment

Job title : Analyst - Enterprise Risk Management jobs in Lagos Job Location : Lagos Deadline : June 26, 2022

Quick Recommended Links

  • Jobs by Location
  • Job by industries
  • Reports To : Manager Enterprise Risk Management

    Division : Risk & Compliance


  • Performing information security gap analysis and remediation, Quality Assurance reviews of IT Controls, Developing IT and Information Security policies.
  • Perform pre and post-implementation reviews of system implementations or enhancements.
  • Conduct Vulnerability Assessment, penetration testing, and Security review of internal applications and their supporting infrastructure.
  • Perform critical analysis and evaluation of risks for relevance and ease of exploitability.
  • Coordinate and facilitate the development and implementation of IT risk management policies, guidelines, methodologies and initiatives for proactive risk management
  • Conduct business reviews to identify single points of failure within MTN's IT infrastructure and develop action plans for addressing them.
  • Recommend, manage, and implement required changes to IT risk and security policies and procedures
  • Support the integration of IT risk management practices into Information Technology functions and other business areas
  • Work directly with departmental heads to facilitate information security risk assessment and risk management processes and to identify acceptable levels of residual risk
  • Assess threats and vulnerabilities regarding information assets and projects and recommend the appropriate controls
  • Ensure plans, policies and procedures of IT processes are aligned with acceptable standards
  • Support IT teams in developing risk management initiatives across MTNN and monitor Key Risk Indicators (KRIs)
  • Communicate with multiple departments to resolve technical and procedural information technology risks
  • Serve as the focal point for IT control incidents, ensuring dissemination and embedding of learnings points from the incidents.
  • Coordinate the update of IT risk event database with event / near misses and agreed action plans
  • Monitor the resolution of issues identified to ensure risks are resolved in accordance with risk management standards
  • Prepare and circulate updates on industry-related events, regulatory directives and lessons arising from risk events / near misses to management
  • Stay abreast of trends in agile IT risk governance, policies and procedures and other external changes that may impact the Company
  • Serve as Subject Matter Expert (SME) for performing vendor risk assessment to improve the overall vendor risk posture
  • Responsible for reviewing and monitoring information systems, platforms, and operating procedures in accordance with established corporate standards for efficiency, accuracy and security.
  • Support ISO 27001 re-certification reviews and validation activities.
  • Maintain all MTNN ethical standards and ensure Risk Management activities are carried out in compliance with ISO 31000 / COSO standards as well as MTNN's risk management methodologies.
  • Identify and analyze the areas of potential risk threatening MTNN's assets, earning capacity, and conduct risk scoring and impact assessment within MTNN.
  • Perform in-depth evaluations on key risks within the organization and assist the business in developing risk prevention strategies.
  • Evaluate risk exposures (opportunity, hazard, uncertainty etc.) that pose an internal or external threat (political, economic, financial, market, international) and make necessary recommendations.
  • Support development of reports to the Board Risk & Compliance Committee on a quarterly basis; and ensure preparation of ERM reports to stakeholders when required.
  • Liaise constantly with Senior Management and Executives on various technology risk matters especially tracking ownership and mitigation of risk items identified as well as train relevant stakeholders and staff on risk matters;
  • champions on the use of Archer eGRC software, on an on-going basis regarding ERM projects.

    Education :

  • First degree in a numerate discipline (IT or computer science preferred)
  • CISA / CRISC certification or other IT-related certifications
  • Fluent in English
  • Experience :

    3 7 years' experience which includes :

  • History of risk management engagement (either as Risk personnel or in Risk Management Consulting)
  • Experience in IT Audit or IT risk management
  • IT governance proficiency
  • Experience with exception reporting, assessment, documentation, implementation and / or design of internal controls.
  • Information systems risk management, control standards, business continuity and information security
  • Project management
  • Accounting / Financial Services jobs in Nigeria *Accounting / Financial Services jobs in Lagos *Analyst - Enterprise Risk Management in Lagos
  • Report this job

    Thank you for reporting this job!

    Your feedback will help us improve the quality of our services.

    My Email
    By clicking on "Continue", I give neuvoo consent to process my data and to send me email alerts, as detailed in neuvoo's Privacy Policy . I may withdraw my consent or unsubscribe at any time.
    Application form