Information Risk Manager

About the role

The Information Risk Manager will lead first‑line information risk oversight for Absa Bank Seychelles, embedding governance, risk management and control practices across information security, data privacy, logical access and data governance. The role ensures business resilience and regulatory compliance by proactively managing, monitoring and reporting information risks in line with group standards.

Key responsibilities

• Act as the primary Information Risk Management lead for Seychelles, providing subject‑matter expertise to business and support functions.
• Implement and embed information risk policies, standards, frameworks and governance requirements.
• Maintain oversight of the information risk profile, identifying and managing key risks, control weaknesses, audit findings, risk events and remediation actions.
• Drive achievement of risk objectives, including risk and control assessments, control self‑assessments, key risk indicators and regulatory requirements.
• Support and coordinate assurance, audit and compliance reviews, ensuring timely remediation of identified issues.
• Provide risk input into business initiatives, projects and change programmes.
• Analyse the effectiveness of risk processes, controls and reporting, recommending improvements.
• Represent Information Risk Management at governance forums, committees and stakeholder engagements.
• Serve as the Information Security and Logical Access Management subject‑matter expert, ensuring alignment with group security policies and standards.
• Oversee access management controls such as user provisioning, role design, segregation of duties, joiner/mover/leaver processes, access recertification and de‑provisioning.

Required profile

• Demonstrated expertise in information risk management, information security and logical access management.
• Strong knowledge of risk assessment methodologies (RCAs, CSAs) and key risk indicators.
• Experience coordinating audit, assurance and compliance reviews and managing remediation actions.
• Ability to provide risk input to business projects and to represent risk functions in governance forums.

Required skills