Technology, Platforms & Operational Risk Manager

About the role

Heirs Technologies is a privately held technology firm helping African organisations with digital transformation, offering cybersecurity, digital trust, managed services, data and AI, and cloud solutions. It is looking for a Technology, Platforms & Operational Risk Manager to own the technology and operational risk framework across platforms, cloud, data centre, SOC and NOC, and to run the risk gates for go-live and service acceptance.

Key responsibilities

• Own the risk profile, tolerances and indicators for every critical service, and run the go-live and service-acceptance risk gate with the COO.
• Own the risk profile of each product (digital banking, Converge, e-invoicing, open banking APIs), mapping payments, fraud and data rules to controls, with threat modelling and penetration testing before each release.
• Provide second-line challenge to the CISO, CTIO and Operations on security posture, patching, incident handling and change control.
• Run quarterly access reviews, oversee privileged and vendor access, and verify joiner, mover and leaver controls and background screening with HR.
• Verify service figures such as availability and SLA attainment before release, and hold root-cause reviews after major incidents.
• Build continuous control monitoring in Sentra (MFA, stale accounts, patching, access) and report the monthly technology and operational risk view to the Executive Management Committee.
• Depute for the CRO at the Executive Management Committee, client forums and the IMS management review.

Required profile

• 10+ years in technology risk, IT audit or IT risk consulting in a bank, payments company, telco or managed service provider.
• CISA or CRISC required; CISM, CFE or ISO/IEC 27001 Lead Auditor an advantage.
• Has presented to an executive committee.

Required skills

• Hands-on experience with cloud (AWS), digital banking or payments platforms, identity and access, and SOC/NOC operations.
• Working knowledge of CBN payments and cybersecurity rules and PCI DSS.
• Risk frameworks covering technology, operational, emerging and reputational risks, programme governance, cyber strategy, change management, software and infrastructure security, threat and vulnerability management, cloud security, IAM, SIEM, fraud monitoring and payments-rule compliance.