64 Implementing Safety Procedures jobs in South Africa
Manager: Risk Management
Posted 1 day ago
Job Viewed
Job Description
Job Title : Human Capital Project Specialist at Cape Peninsula University of Technology
Job Purpose
To develop, maintain, manage and execute a comprehensive process for identifying, assessing, mitigating, monitoring and reporting on risks that may impact on the University's performance.
Job Knowledge, Skills and Experience
- A relevant M+4 qualification in Finance, Accounting, Auditing or Risk management.
- A relevant Masters qualification is an advantage
- At least 8 years' experience in Enterprise Risk Management.
- Experience working in a higher education environment will be an advantage.
- A Professional membership with IRMSA (Institute of Risk Management South Africa) will serve as an advantage.
- Knowledge of Governance and accountability issues, Internal control and assurance and Enterprise Risk Management concepts are essentials for this job.
- Knowledge of best practices, frameworks and methodologies in risk management such as International Standards of Risk Management (ISO 31000) and King IV principles of corporate governance is necessary.
- Understanding of the Higher Education Act 101 of 1997 and its requirements regarding Fraud and Risk reporting.
- Functioning of Risk Management committees and relevant oversight structures.
- Methodologies to mitigate and monitor risk appetite.
Key Performance Areas / Principal Accountabilities
- Develop, implement and maintain an ERM framework and supporting policies and procedures (including risk tolerance levels and appetite) in line with relevant frameworks and guidelines.
- Develop and implement a Strategic Annual University Risk Management plan that includes the risk profile in line with relevant frameworks and guidelines.
- Develop and implement appropriate and effective risk assessment methodologies, models and systems in line with best practice principles.
- Assess and maintain the risk maturity profile of the University in line with the IRMSA risk maturity model.
- Facilitate the identification and assessment of risks at a strategic and operational level utilising appropriate tools and techniques, taking cognisance of the risk environment.
- Develop strategic and operational risk registers for Faculties and departments at the University in line with the ERM framework and best practice principles as well as the facilitation and development of risk response strategies (mitigation plans) for risks identified.
- Report all relevant risk matters including findings, risk positions and recommendations to relevant stakeholders (on-going), and oversight committees (quarterly).
- Establish a risk management philosophy and culture and maintain it through Risk awareness activities, understanding the risk maturity model, establishing risk appetite and tolerance levels, including the establishment of on-going fraud prevention programme, business continuity and ethics awareness framework.
- Ensure effective coordination of enterprise risk management activities with all assurance providers, such as internal /external audit, forensics and compliance functions. Co-ordinate activities with secretariat services in relation to the Quality and Risk Management committee
Closing Date : 14 September 2025
Enquiries and application assistance : contact (Human Capital Department).
Application process : For applications please visit CPUT Talent Management - Risk Manager - (8108)
Seniority level- Mid-Senior level
- Full-time
- Accounting/Auditing and Finance
- Higher Education and Accounting
Risk Management Specialist
Posted 2 days ago
Job Viewed
Job Description
Risk Management Specialist page is loadedRisk Management Specialist Apply remote type Hybrid locations Cape Town time type Full time posted on Posted Yesterday job requisition id JR10892
Kick-start your career in the online gaming world and experience the very latest in technology and innovation.
Who we are
We’re part of Super Group, the NYSE-listed digital gaming company behind some of the world’s leading Sports and iGaming brands.
At DigiOutsource, we bring passionate people and innovative tech together to create market-leading online gaming solutions. Our multidisciplinary teams are passionate about products, customer experience and security. We’re empowered to achieve the ultimate in high-performance gaming experiences using the best technology available.
Who we’re looking for
We’re on a thrilling journey of growth and innovation, and we need passionate, driven individuals to join us. At DigiOutsource, every day is action-packed, and we expect you to bring your A-game. In return, you’ll find a supportive environment where your skills can flourish and your career can soar.
Ready to become a game-changer? Supercharge your career with us and be part of something extraordinary.
Why we need you
We’re on a mission to create extraordinary experiences for our customers, and we believe that your unique skills, passion and superdrive will help us achieve our vision.
As a Risk Management Specialist, you’ll be supporting and be responsible for assisting with the administration of the enterprise risk management system and associated responsibilities for us to stay ahead of the game.
What you’ll be doing
As part of your role, your responsibilities will include:
Enterprise Risk Management (ERM) System Maintenance:
The role oversees and maintains the ERM framework to effectively identify, assess, monitor and report risks across the organization. The Risk Management Specialist ensures that risk management processes are integrated into strategic planning and daily operations. Regular updates to risk management policies and procedures are conducted to reflect changes in the regulatory environment and industry’s best practices.
System Administration and User Support:
They serve as the system administrator for the Risk Management System (RMS), ensuring the live system and training environment are consistently maintained. The Risk Management Specialist provides first-level support to users on the RMS (example, Riskonnect, Onetrust), troubleshooting system issues and managing user access and permissions. The role requires working with the RMS supplier to resolve technical problems, implement system enhancements and manage updates.
To ensure that risks and incidents are reviewed according to the organisation’s Risk Methodology and Framework, the system automation needs to be monitored.
Training and Development:
The Risk Management Specialist is responsible for designing and delivering risk-related training on the RMS to ensure all users are proficient in its use. This includes the development and maintenance of training materials ensuring that users are kept up to date with system enhancements. Providing basic governance and risk advice to all staff and managers, helping them understand the organisation’s risk management policies and practices is a key part of the role, creating a risk-aware culture among employees.
Data Quality:
The Risk Management Specialist role involves regular review and analysis of information held on the RMS to ensure data accuracy and quality and collaborates with business units to improve the quality of risk and control data.
Ensuring alignment with internal frameworks by analysing risk information and control data and ensuring reporting alignment across the different entities. Assisting the audit function in the administration and documentation of self-certifications.
Reporting:
Prepare insight reports for the Board of Directors and Risk committee on a periodic basis, identify and present key risks, facilitate Risk-focused discussions.
Regulatory Alerts and Compliance Support:
Assisting in the distribution and tracking of regulatory alerts to ensure compliance across the organization.
The Risk Management Specialist offers support to the wider compliance team in analysing risk control information to identify potential areas of concern, including managing documentation, electronic filing systems, and team procedures.
Stakeholder Engagement:
The Risk Management Specialist works closely with stakeholders to identify system enhancements and manage change requests. They manage stakeholders and users to meet deadlines and deliver on risk management objectives.
Continuous Improvement:
Continuously seek ways to improve administrative processes for risk management training, compliance tracking, and risk reporting. Support the organisation in developing and refining risk management processes in line with industry best practices.
This job description is not intended to be an exhaustive list of responsibilities. You may be required to complete other reasonable duties in order to achieve business objectives.
Essential skills you’ll bring to the table
The necessary skills that we require for this role include:
- Strong verbal and written communication skills, with the ability to convey complex ideas clearly and effectively
- Experience working collaboratively in cross-functional teams, with a focus on achieving shared goals
- Expertise in managing multiple projects simultaneously, with a track record of delivering on time and within scope
- Exceptional attention to detail, ensuring high standards of quality in all outputs
- Ability to adapt quickly to changing environments and priorities, maintaining effectiveness in dynamic situations
- BCom in Internal/ External Audit (preferred), Law or related fields or Certifications in Risk Management
- 3 + years proven experience in a risk management or audit environment.
- Qualification in Risk Management, Audit or related fields
- Experience in enterprise risk management
- Report writing experience and presentation skills intended for Senior Management and Boards
- An understanding and working knowledge of prevailing governance, risk and assurance standards and public-sector rules
- Understanding and Experience of ISO 31000 or COSO Frameworks
- Experience of problem solving and ability to make decisions within a level of authority
Desirable skills you’ve got up your sleeve
It would be great if you also have some of the following skills:
- In-depth knowledge of sports betting markets, including odds calculation, betting types and market trends
- Previous experience in the online gaming or casino industry, with a strong understanding of player behaviour and industry regulations
- Familiarity with gambling regulations and compliance requirements in various jurisdictions, ensuring adherence to legal standards
- Experience in developing and executing customer retention strategies
- Desirable would be experience in using ERM software
- Post Graduate certification or Diploma in Risk Management
- ISO 31000 Certification
Our values are non-negotiables
Our culture is underpinned by core values that are linked to key behavioural competencies. Along with the below behavioural competencies, these are essential for all employees in order for you to embed in and drive our culture forward.
These competencies are:
- Adaptability
- Ownership and accountability
- Initiating action
- Resilience
- Team orientation
- Integrity
- Innovation
What you’ll get back
We offer a great variety of personal and professional benefits to help you thrive at DigiOutsource and Super Group. This includes:
- We’re dedicated to your supergrowth. Our comprehensive learning and development programmes give you a range of resources and opportunities to expand your skills and advance your career.
- Your hard work and achievements won’t go unnoticed. Our innovative Performance Tool ensures you receive regular, constructive feedback, helping you to continuously improve and reach your full potential.
- Our Employee Assistance programme offers a variety of benefits which you and your family can benefit from.
- Free Daily Meals
- Free Massages On-site
- Free On-Site Gym
- Group Life Cover
- Funeral Fund Benefit
- Financial Services Assistance
- Employee Assistance Programme
- Curro School Fees Benefit
- Income Continuation Benefit
- Leadership Training
- Referral Bonus
- Medical Aid Subsidy
- Free Sleep Coaching
- On-site Barista
- Retirement Annuity Subsidy
- Team builds
Be part of that Superclass feeling.
At Super Group, diversity is part of our DNA. With teams across 16 countries, 85 nationalities, and 19 languages, we take equal opportunities seriously, championing a supportive, inclusive and empowering environment wherever you are in the Group.
It’s all about putting your experience first and ensuring honesty and fairness in all we do.
Here, your growth is supported and your contributions valued.
Game on!
*Please note we will apply relevance to our Talent Management and Talent Development Programme as part of our recruitment process.
*Shortlisted candidates may need to complete an assessment.
This position requires trust and honesty it has access to customers financial details - therefore a credit and criminal record check will be conducted. The qualifications identified herein are an inherent job requirement; therefore, a qualification verification check will be done. By applying for this role, and supplying the necessary details, you hereby grant us permission to apply for these checks. This will be done in a confidential manner, and solely for the purposes of verification.
Should you not hear from us within 2 weeks, please deem your application as unsuccessful.
The perfect place to work, play and grow!
Similar Jobs (1) Risk Agent locations Cape Town time type Full time posted on Posted 12 Days AgoWe believe in hiring talented, hardworking and ambitious people from all over the world. In return, we ensure a supportive working environment, access to leading edge technologies and a commitment to social awareness and equity.
Working in this unique and highly competitive industry means that we have to take risks and be innovative. The way we do this is by allowing for mistakes, but also making sure we learn from them. And with a multi-cultural workforce that’s unparalleled in its diversity and dynamism, we also offer plenty of scope to grow on a personal level too.
Best of all, we do this while enjoying ourselves as much as possible!
#J-18808-LjbffrRisk Management Specialist
Posted 10 days ago
Job Viewed
Job Description
Join to apply for the Risk Management Specialist role at DigiOutsource
Join to apply for the Risk Management Specialist role at DigiOutsource
Get AI-powered advice on this job and more exclusive features.
Kick-start your career in the online gaming world and experience the very latest in technology and innovation.
Who We Are
We’re part of Super Group, the NYSE-listed digital gaming company behind some of the world’s leading Sports and iGaming brands.
At DigiOutsource, we bring passionate people and innovative tech together to create market-leading online gaming solutions. Our multidisciplinary teams are passionate about products, customer experience and security. We’re empowered to achieve the ultimate in high-performance gaming experiences using the best technology available.
Who We’re Looking For
We’re on a thrilling journey of growth and innovation, and we need passionate, driven individuals to join us. At DigiOutsource, every day is action-packed, and we expect you to bring your A-game. In return, you’ll find a supportive environment where your skills can flourish and your career can soar.
Ready to become a game-changer? Supercharge your career with us and be part of something extraordinary.
Why we need you
We’re on a mission to create extraordinary experiences for our customers, and we believe that your unique skills, passion and superdrive will help us achieve our vision.
As a Risk Management Specialist, you’ll be supporting and be responsible for assisting with the administration of the enterprise risk management system and associated responsibilities for us to stay ahead of the game.
What You’ll Be Doing
As part of your role, your responsibilities will include:
Enterprise Risk Management (ERM) System Maintenance
The role oversees and maintains the ERM framework to effectively identify, assess, monitor and report risks across the organization. The Risk Management Specialist ensures that risk management processes are integrated into strategic planning and daily operations. Regular updates to risk management policies and procedures are conducted to reflect changes in the regulatory environment and industry’s best practices.
System Administration And User Support
They serve as the system administrator for the Risk Management System (RMS), ensuring the live system and training environment are consistently maintained. The Risk Management Specialist provides first-level support to users on the RMS (example, Riskonnect, Onetrust), troubleshooting system issues and managing user access and permissions. The role requires working with the RMS supplier to resolve technical problems, implement system enhancements and manage updates.
To ensure that risks and incidents are reviewed according to the organisation’s Risk Methodology and Framework, the system automation needs to be monitored.
Training And Development
The Risk Management Specialist is responsible for designing and delivering risk-related training on the RMS to ensure all users are proficient in its use. This includes the development and maintenance of training materials ensuring that users are kept up to date with system enhancements. Providing basic governance and risk advice to all staff and managers, helping them understand the organisation’s risk management policies and practices is a key part of the role, creating a risk-aware culture among employees.
Data Quality
The Risk Management Specialist role involves regular review and analysis of information held on the RMS to ensure data accuracy and quality and collaborates with business units to improve the quality of risk and control data.
Ensuring alignment with internal frameworks by analysing risk information and control data and ensuring reporting alignment across the different entities. Assisting the audit function in the administration and documentation of self-certifications.
Reporting
Prepare insight reports for the Board of Directors and Risk committee on a periodic basis, identify and present key risks, facilitate Risk-focused discussions.
Regulatory Alerts And Compliance Support
Assisting in the distribution and tracking of regulatory alerts to ensure compliance across the organization.
The Risk Management Specialist offers support to the wider compliance team in analysing risk control information to identify potential areas of concern, including managing documentation, electronic filing systems, and team procedures.
Stakeholder Engagement
The Risk Management Specialist works closely with stakeholders to identify system enhancements and manage change requests. They manage stakeholders and users to meet deadlines and deliver on risk management objectives.
Continuous Improvement
Continuously seek ways to improve administrative processes for risk management training, compliance tracking, and risk reporting. Support the organisation in developing and refining risk management processes in line with industry best practices.
This job description is not intended to be an exhaustive list of responsibilities. You may be required to complete other reasonable duties in order to achieve business objectives.
Essential Skills You’ll Bring To The Table
The necessary skills that we require for this role include:
- Strong verbal and written communication skills, with the ability to convey complex ideas clearly and effectively
- Experience working collaboratively in cross-functional teams, with a focus on achieving shared goals
- Expertise in managing multiple projects simultaneously, with a track record of delivering on time and within scope
- Exceptional attention to detail, ensuring high standards of quality in all outputs
- Ability to adapt quickly to changing environments and priorities, maintaining effectiveness in dynamic situations
- BCom in Internal/ External Audit (preferred), Law or related fields or Certifications in Risk Management
- 3 + years proven experience in a risk management or audit environment.
- Qualification in Risk Management, Audit or related fields
- Experience in enterprise risk management
- Report writing experience and presentation skills intended for Senior Management and Boards
- An understanding and working knowledge of prevailing governance, risk and assurance standards and public-sector rules
- Understanding and Experience of ISO 31000 or COSO Frameworks
- Experience of problem solving and ability to make decisions within a level of authority
It would be great if you also have some of the following skills:
- In-depth knowledge of sports betting markets, including odds calculation, betting types and market trends
- Previous experience in the online gaming or casino industry, with a strong understanding of player behaviour and industry regulations
- Familiarity with gambling regulations and compliance requirements in various jurisdictions, ensuring adherence to legal standards
- Experience in developing and executing customer retention strategies
- Desirable would be experience in using ERM software
- Post Graduate certification or Diploma in Risk Management
- ISO 31000 Certification
Our culture is underpinned by core values that are linked to key behavioural competencies. Along with the below behavioural competencies, these are essential for all employees in order for you to embed in and drive our culture forward.
These Competencies Are
- Adaptability
- Ownership and accountability
- Initiating action
- Resilience
- Team orientation
- Integrity
- Innovation
We offer a great variety of personal and professional benefits to help you thrive at DigiOutsource and Super Group. This includes:
- We’re dedicated to your supergrowth. Our comprehensive learning and development programmes give you a range of resources and opportunities to expand your skills and advance your career.
- Your hard work and achievements won’t go unnoticed. Our innovative Performance Tool ensures you receive regular, constructive feedback, helping you to continuously improve and reach your full potential.
- Our Employee Assistance programme offers a variety of benefits which you and your family can benefit from.
- Free Daily Meals
- Free Massages On-site
- Free On-Site Gym
- Group Life Cover
- Funeral Fund Benefit
- Financial Services Assistance
- Employee Assistance Programme
- Curro School Fees Benefit
- Income Continuation Benefit
- Leadership Training
- Referral Bonus
- Medical Aid Subsidy
- Free Sleep Coaching
- On-site Barista
- Retirement Annuity Subsidy
- Team builds
At Super Group, diversity is part of our DNA. With teams across 16 countries, 85 nationalities, and 19 languages, we take equal opportunities seriously, championing a supportive, inclusive and empowering environment wherever you are in the Group.
It’s all about putting your experience first and ensuring honesty and fairness in all we do.
Here, your growth is supported and your contributions valued.
Game on!
- Please note we will apply relevance to our Talent Management and Talent Development Programme as part of our recruitment process.
- Shortlisted candidates may need to complete an assessment.
Should you not hear from us within 2 weeks, please deem your application as unsuccessful.
The perfect place to work, play and grow! Seniority level
- Seniority level Mid-Senior level
- Employment type Full-time
- Job function Finance and Sales
- Industries IT Services and IT Consulting, Software Development, and Retail
Referrals increase your chances of interviewing at DigiOutsource by 2x
Sign in to set job alerts for “Risk Management Specialist” roles.Cape Town, Western Cape, South Africa 1 month ago
Cape Town, Western Cape, South Africa 3 months ago
City of Cape Town, Western Cape, South Africa 3 weeks ago
Cape Town, Western Cape, South Africa 5 months ago
Cape Town, Western Cape, South Africa 1 week ago
City of Cape Town, Western Cape, South Africa 3 weeks ago
Cape Town, Western Cape, South Africa 1 week ago
Parow, Western Cape, South Africa 2 weeks ago
Cape Town, Western Cape, South Africa 8 hours ago
Pinelands, Western Cape, South Africa 1 day ago
Cape Town, Western Cape, South Africa 1 day ago
Cape Town, Western Cape, South Africa 1 month ago
City of Cape Town, Western Cape, South Africa 4 hours ago
Bellville, Western Cape, South Africa 1 month ago
City of Cape Town, Western Cape, South Africa 2 hours ago
Cape Town, Western Cape, South Africa 1 week ago
Cape Town, Western Cape, South Africa 1 week ago
Cape Town, Western Cape, South Africa 2 weeks ago
Cape Town, Western Cape, South Africa 2 weeks ago
Cape Town, Western Cape, South Africa 2 weeks ago
Cape Town, Western Cape, South Africa 3 weeks ago
Cape Town, Western Cape, South Africa 1 month ago
Cape Town, Western Cape, South Africa 3 months ago
Cape Town, Western Cape, South Africa 3 months ago
Cape Town, Western Cape, South Africa 3 months ago
City of Cape Town, Western Cape, South Africa 3 weeks ago
Cape Town, Western Cape, South Africa 1 week ago
Cape Town, Western Cape, South Africa 1 month ago
Cape Town, Western Cape, South Africa 5 months ago
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-LjbffrRisk management specialist
Posted today
Job Viewed
Job Description
Manager: risk management
Posted today
Job Viewed
Job Description
Security Risk Management Specialist
Posted 4 days ago
Job Viewed
Job Description
Canonical is recruiting a Security Risk Management Specialist in Cape Town, Western Cape, South Africa.
What you will doIn security risk management we harness industry best practices and drive innovation in security risk assessments and modelling. The security risk management team owns the strategy and practices for identifying, tracking, and reducing Canonical's security risk across the organisation. You will help establish and execute a broad strategic vision for the security risk program and will work cross-functionally with teams across Canonical. The team contributes ideas for Canonical product security, improving the resilience and robustness of Ubuntu customers and users subject to cyber attacks. The team also collaborates with our Organisational Learning and Development team to develop playbooks and facilitate security training.
- Define Canonical's security risk management standards and playbooks
- Analyse and improve Canonical's security risk practices
- Evaluate, select and implement new security requirements, tools and practices
- Grow the presence and thought leadership of Canonical security risk management practice
- Develop Canonical security risk learning and development materials
- Work with Security leadership to present information and influence change
- Participate in developing key risk indicators, provide inputs to the development of key control indicators, and key performance indicators for various programs
- Apply statistical models to risk frameworks (such as FAIR, sensitivity analysis, and others)
- Participate in risk management, decision-making, and collaborative discussions
- Lead quantified risk assessments and understand the value of qualitative data for improvements to quality and engineering processes
- Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action
- Develop templates and materials to help with self-service risk management actions
- Monitor and identify opportunities to improve the effectiveness of risk management processes
- Launch campaigns to perform security assessments and help mitigate security risks across the company
- Build evaluation methods and performance indicators to measure efficiency of security functions and capabilities
- An exceptional academic track record
- Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
- Drive and a track record of going above-and-beyond expectations
- Deep personal motivation to be at the forefront of technology security
- Leadership and management ability
- Excellent business English writing and presentation skills
- Problem-solver with excellent communication skills, a deep technical understanding of security assessments and risk management
- Expertise in threat modelling and risk management frameworks
- Broad knowledge of how to operationalize the management of security risk
- Experience in Secure Development Lifecycle and Security by Design methodology
- Distributed work environment with twice-yearly team sprints in person
- Personal learning and development budget of USD 2,000 per year
- Annual compensation review
- Recognition rewards
- Annual holiday leave
- Maternity and paternity leave
- Employee Assistance Programme
- Opportunity to travel to new locations to meet colleagues
- Priority Pass, and travel upgrades for long haul company events
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence — in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer.
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.
Job details- Seniority level: Entry level
- Employment type: Full-time
- Job function: Finance and Sales
- Industries: Software Development
Officer, Fraud Risk Management
Posted 24 days ago
Job Viewed
Job Description
Business Segment: Personal & Private Banking
Location: ZA, GP, Johannesburg, Baker Street 30
To attend to and act as an initial point of contact for all customer needs and service enquiries related to Risk and Fraud while adhering to the laid down processes and procedures to ensure mitigation of the risk and financial losses for both customers and Standard Bank South Africa.
QualificationsType of Qualification: Secondary/High school/A levels/Matric
Field of Study: Not applicable
Experience Required
Client Coverage
Personal and Private Banking
1-2 years
Exposure in either Fraud or Risk. Contact Centre experience would be an advantage.
- Adopting Practical Approaches
- Articulating Information
- Documenting Facts
- Examining Information
- Following Procedures
- Interacting with People
- Managing Tasks
- Taking Action
- Thinking Positively
- Upholding Standards
Be The First To Know
About the latest Implementing safety procedures Jobs in South Africa !
Officer, fraud risk management
Posted today
Job Viewed
Job Description
Officer, fraud risk management
Posted today
Job Viewed
Job Description
Information Security & Risk Management Analyst
Posted 1 day ago
Job Viewed
Job Description
Information Security & Risk Management Analyst
Date Posted: 09/02/2025
Req ID: 45029
Faculty/Division: VP - Division of University Advancement
Department: Advancement Services
Campus: St. George (Downtown Toronto)
Position Number:
Description:
About us: The Division of University Advancement (DUA) aims to sustain and enhance the University’s academic mission, leadership, and worldwide impact, by engaging alumni and private sector constituents meaningfully in the mission of the University, building mutually beneficial relationships of increasing value and satisfaction over time.
DUA at the University of Toronto is engaged in a transformative agenda deeply rooted in the University’s vision for growth and innovation. We are focused on growing fundraising efforts; enhancing the effectiveness and satisfaction of alumni engagement and programs; building advancement talent capacity within and across divisions and creating an organization and culture that fosters diversity and inclusiveness.
Your opportunity:
The Information Security & Risk Management Analyst will join a dynamic and innovative team focused on delivering technology solutions with comprehensive analysis in support of DUA’s information systems and program initiatives.
The incumbent analyzes complex projects, business/operational practices, digital platforms, services and devices, for information security aspects such as disaster recovery, business continuity, and use of standard architecture design patterns and services such as enterprise identity and access management and standards-based application deployment. This work is realized by the execution of a Threat Risk Assessment (TRA). The incumbent reviews the storage, use, transmission and or modification of information within division and across the Advancement community, including restricted, confidential and public information, and other definitions as required by the business unit or project. The identification of potential information security and privacy risks is done through a Privacy Impact Assessments (PIA).
The incumbent helps develop and deliver outreach and awareness campaigns and contributes to guidelines and practices to implement University policy on the protection of digital assets, and information risk. The incumbent will bring highly developed interpersonal skills, and a strong information security posture to the team, in pursuit of information security goals. The responsibilities are designed to address information security and privacy risks to all types of assets, including the convergence of people, process, regulatory and technology risks.
The incumbent has frequent interaction with all levels of University Advancement community, including stakeholders in divisions and departments; and central departments such as FIPP Office. As a privacy subject matter expert, the incumbent provides guidance to stakeholders to help them assess and understand potential privacy risks. The incumbent will engage with stakeholders to understand current business processes and identify optimal strategies for transitioning these processes, workflows, and data to existing or new systems as well as leading complex system integration projects.
Your responsibilities will include:- Analysing projects or business practices to identify potential privacy and security risks through Threat/Risk Assessments (TRA) and Privacy Impact Assessments (PIA)
- Conducting application vulnerability assessments and/or penetration testing and interpreting the results for business unit staff
- Preparing documents for the protection of restricted or confidential information, or need thereof, and the reduction of service risks such as loss of availability due to inadequate service design, compromise of services due to inadequate design or maintenance procedures through the application of University, industry and regulatory standards, guidelines and procedures
- Analysing and recommending options for risk management based on the assessment and knowledge of current and emerging information security threats to project owners or business units
- Training data users on privacy principles as they relate to their duties. Providing education and awareness to end-users units in understanding the University’s information security procedures, standards and guidelines.
- Implementing risk management plans and processes
- Keeping well-informed on changes to applicable regulatory and legislative requirements
- Advising clients and technical subject matter experts on best practice for documenting system requirements
- Bachelor's Degree or acceptable combination of equivalent experience.
- Minimum four years of related experience working in a similar capacity, with demonstrated experience in information security and risk management, and/or risk analysis.
- Experience in analysis of information system hardware, operating systems, middleware, application software, and network devices to find vulnerabilities or risks and provide recommendations on risk mitigations.
- Strong knowledge of privacy and security concepts, trends, and issues; including an understanding of their impact on business processes, as well as skills with interpretation and communication of principles and compliance requirements.
- Knowledge of applicable legislation such as Freedom of Information and Protection Act (FIPPA).
- Ability to interpret and apply University guidelines pertaining to access to records and the protection of privacy.
- Strong knowledge of information security frameworks, incident response practices, industry standards, trends, and issues.
- Experience and familiarity with a broad range of technologies (operating systems, networking, cloud and on-prem services, etc.) with the ability to find vulnerabilities provide recommendations for mitigation.
- Experience of Threat-Risk Assessment and Privacy Impact Assessment processes.
- Demonstrated strong analytical ability, attention to detail and problem-solving skills.
- Good organizational skills and the ability to work accurately and quickly under pressure with frequent interruptions.
- Demonstrated ability to exercise initiative, respond to changing priorities.
- Demonstrated effective oral and written communication skills including both technical and business writing, documentation and presentation skills.
- Ability to explain technical concepts to a wide range of non-technical users, both orally and in writing.
- Strong time management and organizational skills with the ability to work within tight timelines.
- Strong commitment to equity, diversity, inclusion, and the promotion of a respectful and collegial learning and working.
- An appreciation for / exposure to information security and threat/risk analysis activities.
- Ability to identify areas of vulnerability in the use, storage or modification of personal information.
- Understanding of project management and procurement processes.
- Security and/or privacy certifications, or progress in their pursuit.
- ITIL foundations level (or higher) certification.
- Familiarity with the University environment, governance, and policies.
- Motivated self-learner
- Organized
- Perceptive
- Resilient
Closing Date: 09/11/2025, 11:59PM ET
Employee Group: USW
Appointment Type : Budget - Continuing
Schedule: Full-Time
Pay Scale Group & Hiring Zone:
USW Pay Band 12 -- $81,312, with an annual step progression to a maximum of $103,986. Pay scale and job class assignment is subject to determination pursuant to the Job Evaluation/Pay Equity Maintenance Protocol.
Job Category: Information Technology (IT)
Recruiter: Fiona Chan
Lived Experience Statement
Candidates who are members of Indigenous, Black, racialized and 2SLGBTQ+ communities, persons with disabilities, and other equity deserving groups are encouraged to apply, and their lived experience shall be taken into consideration as applicable to the posted position.
Diversity Statement
The University of Toronto embraces Diversity and is building a culture of belonging that increases our capacity to effectively address and serve the interests of our global community. We strongly encourage applications from Indigenous Peoples, Black and racialized persons, women, persons with disabilities, and people of diverse sexual and gender identities. We value applicants who have demonstrated a commitment to equity, diversity and inclusion and recognize that diverse perspectives, experiences, and expertise are essential to strengthening our academic mission.
As part of your application, you will be asked to complete a brief Diversity Survey. This survey is voluntary. Any information directly related to you is confidential and cannot be accessed by search committees or human resources staff. Results will be aggregated for institutional planning purposes. For more information, please see
Accessibility Statement
The University strives to be an equitable and inclusive community, and proactively seeks to increase diversity among its community members. Our values regarding equity and diversity are linked with our unwavering commitment to excellence in the pursuit of our academic mission.
The University is committed to the principles of the Accessibility for Ontarians with Disabilities Act (AODA). As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities.
If you require any accommodations at any point during the application and hiring process, please contact