ICT Risk Manager at National Bank of Kenya

Position Overview

We are seeking a qualified ICT Risk Manager to support risk identification and management across all aspects of Information Technology for the Bank. The role holder will update executive management on risk assessment results and make recommendations for mitigations to protect Bank systems and cover potential financial losses.

Key Responsibilities

• Develop and implement an ICT Risk Management Framework
• Conduct system vulnerability tests in line with Bank policies and global standards, and report to management on vulnerabilities and protection against cyber-attacks
• Identify and assess ICT risks, design mitigation controls, and monitor risks until closure
• Clearly document and define risks and their potential impact alongside the statistical probability of such events, and identify affected systems
• Develop ICT risk management guidelines for use across all Bank divisions
• Conduct system penetration testing during various stages of the system development lifecycle to ensure integrity, availability, and assurance of systems and technical processes
• Review compliance with ICT security policies across the technology ecosystem
• Evaluate IT security policies, processes, and procedures for completeness and applicability
• Evaluate IT service management policies, processes, and procedures for completeness and applicability
• Work closely with Business functions to identify risks in products using digital platforms
• Conduct fraud assessments on technology platforms in line with the Fraud Risk Management Policy
• Keep abreast of current advances in all areas of ICT security
• Continuously evaluate communication security, data vulnerability, and business continuity; examine employee compliance with security controls and identify deficiencies

Skills & Experience Required

A Bachelor's Degree in a relevant field is required.