AVP, Root Cause Analysis

Support the execution and operationalisation of the enterprise-wide Root Cause Analysis (RCA) function by conducting structured investigations, ensuring quality RCA reporting, and driving timely remediation of incidents, control failures, and near-misses. Contribute to strengthening risk culture through consistent analysis and lessons learned.

1. RCA Execution & Analysis

• Conduct end-to-end RCA for incidents in accordance with recognized industry standards and best practices (e.g., ISO 9001 (Quality Management), ISO 22301 (Business Continuity), ISO/IEC 27001 (Information Security), to identify underlying causes and drive effective corrective and preventive actions.
• Apply structured methodologies
• Identify true root causes vs symptoms across people, process, technology, and third-party factors
• Support data gathering, evidence validation, and investigation documentation
• Evaluate recurring issues and identify underlying organizational, governance, or control gaps.
• Provide independent challenge to investigation outcomes to ensure objectivity and completeness.

2. RCA Reporting, Governance & Documentation

• Prepare clear, structured, and audit-ready RCA reports
• Ensure consistency with RCA templates, standards, and governance requirements
• Document findings, contributing factors, and impact assessments
• Maintain central repository of RCA records
• Support periodic reporting to management committees, risk forums, and governance bodies.
• Ensure RCA findings are traceable, evidence-based, and aligned with regulatory and audit expectations.

3. Remediation Tracking & Follow-Up

• Work with stakeholders to translate findings into actionable corrective actions
• Track action plan progress, timelines, and ownership (PICs)
• Monitor effectiveness of remediation and highlight gaps
• Escalate overdue, ineffective, or high-risk actions to Head of RCA, Management, and relevant governance committees.

4. Stakeholder Coordination

• Coordinate RCA activities with: IT / GT teams (Infrastructure, Applications, Security), Business units, Risk, Compliance, and Audit teams and Other relevant and interested parties
• Facilitate RCA discussions and workshops
• Ensure timely input from all relevant parties

5. Quality Assurance Support & RCA Governance

• Review RCA inputs from business units for completeness and quality
• Ensure investigations identify true root causes and avoid shallow conclusions.
• Support periodic reviews of RCA governance and processes.
• Monitor adherence to RCA standards and identify opportunities for process enhancement.
• Develop and assess metrics, methodology and maturity indicators to improve investigation effectiveness.
• Support Head of RCA in strengthening RCA quality standards

6. Trend Monitoring, Risk Insights & Strategic Reporting

• Assist in identifying recurring incidents, root cause trends and emerging risk themes across the organization.
• Support preparation of dashboards and reports on (not limited to): Incident patterns, Control weaknesses Repeat issues
• Contribute insights for continuous improvement
• Recommend strategic roadmap and improvements to strengthen operational resilience and risk management capabilities.

7. Integration with Incident & Resilience Processes

• Support integration of RCA outcomes into: Incident management, Business Continuity (BCP) improvements, Disaster Recovery (DR) enhancements, Cyber resilience programs
• Participate in post-incident reviews and simulation exercises (if required)

8. Continuous Improvement

• Support the development and evolution of the enterprise RCA processes and procedures.
• Identify opportunities to enhance RCA capabilities through automation, analytics, and AI-enabled insights.
• Contribute to RCA maturity assessments and benchmarking against industry best practices.
• Support the development of enterprise-wide lessons learned programmes and knowledge repositories.
• Support in providing strategic recommendations to strengthen governance, risk culture, operational resilience, and control effectiveness.
• Assist Head of RCA and senior management in understanding key risk drivers and systemic issues impacting organizational objectives.
• Perform any other duties as requested by the GRC Heads.