Information Security Administrative Clerk

R i s k M a n a g e m e n t & B u s i n e s s C o n t i n u i t y

Curriculum Vitae of Tertia Ludeman Page 1/7

TERTIA LUDEMAN

Address: Kempton Park, Gauteng

Mobile: +27 [0] 82 819 3535

Email: ******.*******@*****.***

PROFESSIONAL PROFILE

Across a loyal and highly progressive 25+ years of service to a leading South African Bank, Tertia Ludeman has maintained a record of substantial achievement and continued professional development. Beginning her career within the Financial Sector as an Administrative Clerk and Financial Controller, Tertia discovered her niche in the area of Risk Management from 2005 - going on to attain extensive promotion across the roles of; Risk Management Liaison Officer BCM Manager - Business Risk BCM Sector Manager - Services Cluster Business Risk Consultant and Specialist Business Risk Consultant - Governance & Control. A highly structured leader, who values relationship building as being of key importance to continued success; Tertia motivates excellence across all initiatives and strives to deliver beyond stakeholder expectations. A technical expert in banking systems, policies and procedures; she is adept in identifying, assessing and managing comprehensive risk areas - implementing applicable risk controls and maintaining stringent compliance levels.

Tertia is a highly visible and proactive company representative, who has attained 9 Global Recognition Awards received for displaying Barclay Values in Service Excellence. She is a recognised valuable addition to the Risk Management & Compliance Leadership Team. QUALIFICATIONS

EXTERNAL COURSES

Risk Management & Business Continuity Management Training Course; Recoverdex, 2010 Risk Management: Define a Framework Identify the Risks Assess the Risks Evaluate the Risk Appetite Responses to Risk Gaining Assurance About the Effectiveness of Risk Management Embed & Review. Business Continuity Management: Policy, Culture & Program Management Understanding the Organisation Determining BCM Strategies Developing & Implementing a BCM Response Exercising, Maintenance & Review

Disaster Recovery Management: Developing the Disaster Recovery Plan Performing Business Impact Analysis & Risk Assessments for Systems Data Recovery Planning Prioritising Systems & Functions for Recovery Strategies for Recovery Testing & Rehearsal of the DRP Review & Maintenance of the DRP Crisis Management: Developing Crisis Management Plans Command Centres Health & Safety Procedures

Dealing with the Press / Media Compliance & Regulatory INTERNAL COURSES [ABSA]

Anti-Bribery & Anti-

Corruption

Basic Financial Crime

Concepts

FAIS Programme for Other

Fast Forward Bond

HIV: Counselling Testing &

Disease Management

Microsoft Excel [Level 2]

Microsoft Word [Level 2]

Money Laundering

National Credit Act

R i s k M a n a g e m e n t & B u s i n e s s C o n t i n u i t y Curriculum Vitae of Tertia Ludeman Page 2/7

Basic Fire Awareness &

Evacuation

BCC Practitioner Training

BCM Methodology, Tools,

Coordinators, Scorecard, All

Staff General Awareness

Code of Banking Practice

Conflict of Interest

Consumer Protection Act &

Companies Act

Customer Care Process

Training

Data Privacy

Effective Telephone Skills

Employee Compliance

Conduct Guide

ER-Navigator

Information Security

Awareness

Introduction to Operational

Risk Management

Introduction to The

Competitions Act

Introduction to The New

Product Approval Management

Information Cycle

Key Risk Scenario Theory &

Application

Know Your Customer

LANDP

Master The Fundamentals of

GL Accounts & Identify

Various Generic GL Balancing

Tools

Operational Risk Control

Issues

Operational Risk Events

Operational Risk Self-

Assessment

Operational Risk: Introduction

to Key Risks

Principal Risks: An

Introduction

Risk & Control Assessment

Theory & Scenario Application

Sanctions

Securities Small Business &

Securities Individual

Social Media

Treating Customers Fairly

PROFESSIONAL EXPERIENCE (CURRENT)

ABSA Bank January 2015 to Date

Business Risk Consultant - Governance & Control [ABSA Towers West] Overview of Role [2018 to Date]:

Responsible for assuring the business against risk via definition and implementation of applicable controls, thereby further improving service delivery to clients.

Ensures that all agile Cash Management business objectives are achieved in-line with the ABSA Risk Management Framework, securing strategic and operational deliverables for each year.

Maintains an effective control environment across all processes and operations, ensuring that sound governance practices are embedded and that Cash Management remains compliant. This includes;

Creating & Managing Business

Continuity Plans

Conducting MCA Assessments

Operational Risk System

Reporting & Event

Management

Developing Risk Tolerance &

Limits Statements [KRIs]

Reconciling GL for Operational

Risk & Losses

Conducting Risk Reporting

[CMRA, KRI Dashboard,

CRSA]

Developing Risk Profile

Reporting & Packs

Monitoring Audit Actions

Facilitating Audit Reviews

Facilitating Incident

Closure & Milestone

Conversion Packs

CMOD Document

Retrieval Conformance

Testing

Loading & Verifying Client

Contracts

Product Approval [NAPA]

Participating in Product

Reviews & Actions

Information Risk

Management [BLoR, On-

Site Storage Assessment,

EUDA Review, POPIA

Review]

Attending SLA Meetings &

Forums

Ensuring Compulsory

Training Interventions

R i s k M a n a g e m e n t & B u s i n e s s C o n t i n u i t y Curriculum Vitae of Tertia Ludeman Page 3/7

Implementation of ABSA Risk Framework:

Accountable for implementation of the Risk Framework across the relevant area of control, establishing and maintaining RCA [including capturing and managing on Open Pages].

Performs regular risk identification and assessment in order to enhance the control environment, further designing and leading roll-out of applicable control self-assessments [Checklists & MI to Risk Owner].

Manages OP risk self-assessments and the effectiveness ratings of RCAs, routinely tracking and monitoring all RCA Action Plans.

Coordinates all Open Pages activities relating to specific business area RCA, tracking open actions and linking action plans / responses as relevant.

Risk Events Management:

Ensures that effective processes remain in place, and that all stakeholders are adequately informed - regarding risk events and end-to-end processes occurring across the relevant area of control.

Approves risk events on Open Pages and ensures linking to the correct key risk area, further tracking all loss events.

Manages overdue actions on Open Pages, and verifies that risk event items are appropriately reconciled and balanced according to the monthly General Ledger.

Further supports root cause, trend analysis and identification of causative factors; reporting to the Line Manager on a monthly basis.

Key Risk Indicators:

Facilitates the identification and verification of KRIs when new RCA is established, ensuring that only relevant KRIs are applicable [as prescribed by Key Risk Owners].

Maintains KRIs on Open Pages, including all applicable reports and actions; and monitors action plans for Red or Amber Status.

Appoints and guides a Business Representative in feeding information into the KRI System, ensuring that MI remains valid / up-to-date.

Governance & Reporting:

Attends and valuably participates in relevant Risk Councils and ManCo Meetings, ensuring that RCA and Control Risk is managed at the appropriate level.

Ensures availability of the BOC Scorecard for relevant Business Units Ensures that business is informed of all compliance, FAIS and regulatory training statistics in a timely manner.

Works alongside BRO to ensure that one unified message is disseminated to business regarding Risk Councils and Reporting.

Stakeholder Management:

Engages with BU Management and BRO on a monthly basis, upholding alignment with requirements and expectations.

Regularly identifies and engages with key stakeholders, and provides guidance to various Bus; assisting in improving the comprehensive control environment. Key Projects & Achievements:

Played a crucial role in transforming the level of governance within the refund process, commendably assuming the role of Process Custodian and championing a close to 80% reduction in refunds for 2018.

Provided essential guidance on a cheque imaging issue, holding the IT Department to account and motivating them to implement a solution in a timely and effective manner Single-handedly performed all conformance testing [an immensely time consuming and detail oriented process].

Assumed a hands-on role in remediating device billing and contract management issues, championing migration form paper to digital – further instilling an enhanced governance and management standard that R i s k M a n a g e m e n t & B u s i n e s s C o n t i n u i t y Curriculum Vitae of Tertia Ludeman Page 4/7

was sorely lacking Currently in the process of physically auditing each client’s billing records against contracted activities, assisting in the claw-back of leaked revenue.

Have maintained a consistent 100% training record within the area of responsibility [with regards to the development of the Cash (current) and T&D (previous) Teams]. Business Risk Consultant - Governance & Control [ABSA Towers West] Overview of Role [2015 to 2017]:

Served as a Risk Consultant for Savings & Investment, including one CPA Stream From 2017 additionally appointed to service Cash & Cheques, holding joint responsibility for this function alongside the 2LoD.

Accountable for [within T&D];

Quarterly Risk Reporting &

KRIs

BCM Management

Risk Appetite Statement

Development

Road to Satisfactory

Risk Assessment &

Management

Management Control

Assessment & Control

Environment

Enhancement

Attestations [PAT & Outside

Business]

Mitigation of False Reporting

[Grey Lists]

Compulsory Training &

Monitoring

Furthermore;

Assisted other Business Units [Retail & Business Transactional and Partial International Banking] in conducting quarterly risk self-assessments, capturing risk events and performing monthly loss reconciliations [with no data quality issues raised on any areas / events captured].

Chaired monthly BU Risk Forums for Retail & Business Transactional, and supported activities including; BLOR, EUDA, CPA [Two Additional Work Streams], and driving of MCA and CE Actions. Key Projects & Achievements:

Department received commendation from BAGL and RBB Conduct Risk Representatives, for the quality of Quarterly Conduct Risk Reporting.

Over and above daily duties, delivered on initiatives including;

Participation in Project STIG [Group Project] on the Framework and Systems Working Groups.

Assisting Client Contracts Clean-Up in Cash & Cheques - for up to 2200 Contracts [Still in-Progress]. PRIOR TENURES

ABSA Bank January 2005 to December 2014

Business Risk Consultant [ABSA Towers West] October 2012 to December 2014 Business Risk Consultant [ABSA Towers East] January 2011 to September 2012 Overview of Role:

Business Risk Consultant - ATW: Accountable for the implementation of the ABSA Risk Framework and management of Risk Events Developed and communicated key risk indicators Engaged with diverse stakeholders and managed stakeholder relationships Championed optimal governance and reporting.

Business Risk Consultant - ATE: Developed and implemented appropriate Risk Governance Structures, creating a sound risk capability Ensured establishment and following of effective management practices for the full risk profile.

Risk Governance:

Developed and implemented effective Risk Governance Structures within the Services Cluster Change & Integration [SCCI] Area.

Ran risk workshops and forums to ensure proper identification and on-going monitoring of risk. R i s k M a n a g e m e n t & B u s i n e s s C o n t i n u i t y Curriculum Vitae of Tertia Ludeman Page 5/7

Ran compliance workshops to disseminate information and secure adherence to appropriate standards.

Contributed to ManCo in a value adding manner.

Risk Capability:

Drove creation of Risk Capability within the Services Cluster Change & Integration [SCCI] Area - delivering a pro-active and effective Business Risk Service.

Served as a specialist in producing the desired professional outputs.

Provided specialist guidance and leadership support to business.

Promoted a culture of self-development and world class deliverables. Reporting:

Championed and secured effective management practice and a robust reporting system for the full Risk Portfolio of the Services Cluster Change & Integration [SCCI] Area This included;

Bi-Annual RCAs

Indicators & Events

Monthly ORC & Control

Issue Reports

Quarterly Operational Risk

Self-Assessments

Regulatory Compliance &

Training Profiles

Quarterly Principal Risk

Reports

Conformance Testing on

Principal Risks

Internal Control Environment:

Substantially improved assessment across the internal control environment, supporting management in- line with the agreed upon risk appetite and control commitments This included;

Operational Risk

Management

[Self-Assessment, RCAs,

Conformance Testing]

Risk Appetite Monitoring

[Per Business Unit]

Fraud Oversight Committee

Reporting

Attestations [Principal Risk,

Leaver Access Revocation

Process]

Timely Audit Observations

& Positive Findings

90% Conformance Testing

Effectiveness

85% Key Controls Testing

by AIA & 90% Identified in

RCAs

Zero Failed Issue

Assurance

Zero Red Control Issue

Assessment

Full Adoption of The

Principal Risk Framework

Detailed Action Plans to

Address Amber & Red

Ratings

Quarter-On-Quarter

Reductions in KRI

Breaches & Percentage of

Ineffective Controls

Full Governance &

Compliance

Business Continuity Management [BCM]:

Managed Business Continuity in-line with the prescripts of the Business Continuity Plan.

Monitored Business Continuity plans and activities via a monthly scorecard.

Provided support to diverse stakeholders regarding BCM. Information Security [ISO]:

Highlighted new information security issues and requirements to Business Unit Leaders.

Interpreted information security policies, standards and procedures as per risk / compliance requirements.

Monitored and reported on all physical and logical access issues.

Escalated any unresolved issues or queries to the Information Security Office.

Represented the needs of the Department at Information Security Meetings.

Ensured provision of relevant information security guidance and training to information owners. Record Management [RM]:

Created, published and updated a Record Retention Schedule for various areas of operation, working in accordance with ABSA Record Management Policy [including destruction criteria for sensitive documents].

Monitored compliance to the schedule and policy across Business Units, and logged deviations with the Group Operations Office.

R i s k M a n a g e m e n t & B u s i n e s s C o n t i n u i t y Curriculum Vitae of Tertia Ludeman Page 6/7

Supported ABSA compliance with Barclay [Partner] Audit Requirements, securing availability of necessary records and reporting.

Data Privacy [DP]:

Implemented a key Data Privacy Policy, controlling via means of feedback and scorecards.

Logged any incidents with the District Group Office.

Represented the needs of the Department at Data Privacy Meetings. BCM Sector Manager - Services Cluster [ABSA Towers East] January 2010 to December 2011

Responsible for coordinating and managing the successful promotion of Business Risk Support / Continuity Assurance for the Services Cluster.

Built mutually beneficial relationships with multi-functional stakeholders, and ensured effective communication across the Services Cluster - championing full BCM compliance.

Developed an effective structure that enabled proactive Business Risk Support; with pre-emptive issue resolution, and on-going success and integrity within the close support environment.

Contributed valuably to monthly ManCo reporting, regarding the identification of trends and possible future risk areas.

Drove business continuity assurance for the services cluster, including; Plan Development, Documentation

& Management Plan Testing with Demonstrated Results Education & Awareness Building Risk & Business Impact Analysis Governance Recovery Strategy for Business IT Implementation of Appropriate BCM Tools.

Upheld effective communication channels across the services cluster, securing full BCM compliance regarding BCM Policy and minimum standards on; Governance & Reporting Analysis Provision Planning Validation Education & Awareness Supplier Engagement Crisis Management.

Managed relationships with Business Unit Owners undertaking BCM roles and responsibilities Provided direction and support to Lead Business Continuity Coordinators regarding deployment and maintenance of plans and solutions.

Provided input into proposed crisis management and business recovery strategies, including advising associated expenditure and cost allocation for relevant Business Units.

Championed a culture of business continuity awareness across the organisation, embedding related principles in the operations of ‘business as usual’.

Ensured that a robust reporting system was effectively implemented and managed, including; Monthly Consolidation of BCM Scorecards Track & Trace Action Plans [Overall RAG & Capability Percentage of Less Than 80%] Tracking of BCM Audit Recommendations Tracking of Findings / Results of Planned Testing Tracking of Issue Log Monthly Consolidation of the Services Cluster Control Sheet. BCM Manager - Business Risk [ABSA Towers East] January 2008 to December 2009

Assisted in the maintenance of an effective Risk Governance Structure, with oversight of Payments, Processing, Cash Records Management and Shared Services.

Seamlessly delivered change within the Services Cluster Support Centre; driving BCM Results at RAG 100% and REC 100% for the Operations Services, Cash, Payments, Records and Processing Centres [as well as other Units within SCSC].

Participated in the development and presentation of risk workshops and forums, promoting the proper identification and monitoring of risk as required.

Provided relevant feedback to Line Managers regarding risk assessment results, at the appropriate monthly risk forums.

Performed Business Continuity Coordinator roles and responsibilities in-line with the requirements of the BCC Statement of Responsibility.

R i s k M a n a g e m e n t & B u s i n e s s C o n t i n u i t y Curriculum Vitae of Tertia Ludeman Page 7/7

Enhanced engagement between colleagues and stakeholders, to add substantial value to deliverables within GCOO Business Risk.

Ensured that the Operational Risk Function was effectively implemented, and continuously promoted heightened Business Risk Handling Capability.

Liaison Officer - Risk Management January 2005 to December 2007

Responsible for comprehensive control / coordination of;

Algo Capturing & Approving

Asset Register

BCM & OHS Policy

BCM Scorecard

Budget Analysis

Compliance

Employment Equity

Statistics

Financial, Non-Financial,

Mandate & Logical Access

Assessment

Fraud & Loss

Information Security

Assessment

Investigation & Incident

Reporting

Key Register

Management Assurance

Mandates

Trading & Non-Trading

Losses

SOX, Compliance, OHS &

BCM Process Assessment

Quality Assessment

Reconciliations

Regional Business Continuity

Regional OHS & OHS

Scorecard

Report Writing

Management Reporting

Subpoena Reporting

ORC Reporting

EARLIER EMPLOYMENT SYNOPSIS

ABSA Bank 1995 to 2004

Financial Controller - Auxiliary Services [2002 to 2004] Administration Clerk - Cancellations [2001 to 2002] Administration Clerk - Branch Accounts [1995 to 2001] OK Village Bazaar 1994 to 1995

Supervisor [Cashiers] Cashier

PERSONAL DETAILS

Date of Birth, Nationality 16 June 1977, South African Senior Certificate / Matric High School Jeugland, 1995 Driver’s License Code 08

References & Certificates Presented upon request

Availability Immediate

Contact this candidate