Cyber Security Risk Analyst at SARB in Pretoria
South African Reserve Bank · Pretoria, Gauteng
Overview
The South African Reserve Bank is looking for a Cyber Security Risk Analyst to join their team in Pretoria. In this role, you will drive cyber and information security risk assessments across the group, working with threat analysts and business areas to identify risks and develop mitigation plans. This is a great opportunity for someone with strong IT and security risk experience who wants to contribute to protecting South Africa's financial system while growing their career at a respected national institution.
About the role
The South African Reserve Bank (SARB) is seeking a Cyber Security Risk Analyst to join the Business Solutions and Technology Department (BSTD) in Pretoria. In this role, you will be responsible for planning and prioritising information and cyber security risk assessments across the SARB group.
You will work closely with business areas to scope assessments, identify information assets, and evaluate the potential impact of breaches to confidentiality, integrity, and availability. You will also collaborate with the Threat Analyst to integrate threat assessments into the risk process. Your work will directly support the bank's ability to manage cyber risks and protect critical information.
To succeed in this position, you should have a strong understanding of information security risk management frameworks and be able to engage with stakeholders at various levels. You will play a key role in maintaining the SARB Risk Universe and providing concise risk assessment reports with mitigation plans.
Application note: The SARB is committed to diversifying its workforce, and preference will be given to suitable candidates from designated groups. People with disabilities are welcome to apply. The bank offers remuneration and benefits commensurate with the level of the position. Applications must be submitted via the SARB's official career portal.
Requirements
- Minimum of a Bachelor Degree (NQF 7) in Security, Information Technology, or equivalent
- At least 5 to 7 years of experience in an Information Technology environment, of which 2 years must be within a Security Risk environment
- An industry related Security Certification would be an added advantage (e.g. CRISC, CISM, CISA, CISSP)
- Knowledge and experience using the ISF Risk Management Framework
- Leading information security best practice knowledge
- Understanding of relevant legislation
- Knowledge of information risk trends
- Strong service and stakeholder focus
- Excellent communication skills
- Ability to influence and drive for results
- Learning focus with problem solving and analysis skills
- Teamwork and planning/organising abilities
- Attention to detail
Responsibilities
- Plan and prioritise information and cyber security risk assessments across the group
- Collect and compile business area function, process, and technical risk information to scope assessments
- Identify information assets and rate potential impact from breaches of confidentiality, integrity, or availability
- Integrate threat assessments by working with the Threat Analyst to ensure an appropriate threat landscape
- Assist the threat analyst in identifying and rating vulnerabilities and controls
- Facilitate discussions with subject matter experts to identify risks and derive residual likelihood and business impact ratings
- Maintain and report on the SARB Risk Universe through concise risk assessment reports with mitigation plans
- Stay abreast of developments in information security risk management and propose improvements to current practices
- Engage with stakeholders at different levels of seniority to solicit and convey information
Job details
- Organisation
- South African Reserve Bank
- Location
- Pretoria, Gauteng
- Job type
- Full time
- Experience level
- Mid (5+ years)
- Education
- Bachelor
- Category
- Safety & Security
- Posted
- 27 October 2026 (1 week ago)
- Application Method
- Apply online
Success Guide
If you are applying for this Cyber Security Risk Analyst role at the SARB, make sure your CV clearly highlights your experience with risk assessments and any relevant security certifications like CRISC, CISM, CISA, or CISSP. The bank values hands-on experience with frameworks such as ISF, so mention any projects where you applied risk management methodologies. Since the role involves engaging with stakeholders, prepare examples of how you have communicated complex security risks to non-technical audiences. Also, note that the SARB is committed to diversifying its workforce, so if you belong to a designated group, feel free to mention this in your application. Good luck!
How we help you prepare
This employer takes applications on their own website, so you'll submit this one yourself — but SPAAN NOW gets everything ready for you first. Here's how it works:
- Our AI tailors your CV to match this job's keywords and requirements, so it stands out to recruiters and screening systems.
- A custom cover letter is written specifically for this role — no generic templates.
- We gather the documents this job needs: CV, Degree certificate and Professional registration. SPAAN NOW pulls these from your profile and packages them together, ready to attach.
- Once your application is prepared, we show you exactly how and where to apply — just follow the link to the employer and submit your ready-made CV, cover letter and documents.
- Mark it as applied under Applications to keep track, and if you're shortlisted, use AI Interview Prep to practise questions commonly asked for roles like this.
We do the hard part — tailoring and gathering everything — so applying yourself only takes a minute.
Spaan Talk
Nobody has said anything yet. Be the first.