Manager, ICT Risk

Manager, ICT Risk – NCBA Bank Employer:NCBA BankPosition:Manager, ICTType:Full-timeLocation:TanzaniaApplication:Online through NCBA Bank’s career portalRequisition ID:4069 Job Purpose The Manager, ICT Risk is responsible for identifying, assessing, monitoring, and mitigating ICT and cybersecurity risks within the bank. The role supports effective risk management, regulatory compliance, technology controls, and business continuity. Key Responsibilities 1. Internal Business Processes – 75% Conduct ICT risk assessments and evaluate the effectiveness of technical and procedural controls. Provide practical recommendations to management for mitigating identified risks. Assess the bank’s information and cybersecurity capabilities, operations, and technology controls. Identify risks associated with business disruption and assess their potential impact. Identify critical points of failure within ICT disaster recovery plans. Recommend mitigation measures based on industry best practices. Review and report on residual ICT risks. Review and improve Information and Cyber Security training and awareness programmes. Identify and communicate emerging ICT and cybersecurity threats in relation to the bank’s risk profile. Convert complex risk, process, and control relationships into clear dashboards and reports. Support internal assessments and regulatory examinations through effective risk management oversight. Support development of ICT risk management practices, frameworks, and methodologies. Review, report, and follow up on gaps identified during ICT risk assessments. Periodically review ICT and cybersecurity policies, standards, and guidelines. 2. Customer – 15% Support customer satisfaction through timely ICT risk assessments. Provide prompt responses to internal customer queries relating to ICT risks. 3. Learning & Growth – 10% Deliver agreed performance objectives. Take responsibility for continuous learning and professional development. Participate in coaching and training opportunities. Continuously build professional capacity in ICT risk management. Academic Qualifications Required: University degree in a relevant field. Added Advantage: Master’s degree. Professional Certifications Relevant certifications in information security and risk management are preferred, including: CRISC– Certified in Risk and Information Systems Control CISM– Certified Information Security Manager CISA– Certified Information Systems Auditor CISSP– Certified Information Systems Security Professional Equivalent certifications. Work Experience At least4 years’ experience in a similar role. Experience should include exposure to:Banking operationsTechnologyAssurance functions Banking operations Technology Assurance functions Technical Knowledge Candidates should have: Practical knowledge ofBank of Tanzania (BoT) guidelines on ICT Risk Management. Practical knowledge of risk and control frameworks. Ability to apply risk and control frameworks within thefinancial services industry. Knowledge of ICT and cybersecurity risk assessment. Knowledge of disaster recovery and business continuity risks. Understanding of technology controls and cybersecurity governance. Key Stakeholders Internal Business Units Technology & Operations Enterprise Projects Team Internal Audit External Vendors External Auditors Core Competencies The position requires intermediate-level capability in: Driving for Results Business Savvy Selling the Vision Fostering Collaboration Responsiveness Coaching & Developing Others Building Trust Openness Building Organizational Talent Empowerment & Delegation How to Apply Applications should be submitted through theNCBA Bank career portalusingRequisition ID 4069. CLICK HERE TO APPLY