Assistant Manager, ICT Risk

NCBA Bank is seeking an Assistant Manager, ICT Risk to assess and manage information and cybersecurity risks, strengthen ICT risk management frameworks, and support regulatory and internal risk assessments in Dar es Salaam.

Responsibilities

• Undertake risk assessments, analyse the effectiveness of technical and procedural control activities, and provide actionable recommendations to management.
• Assess the Bank’s information and cybersecurity capabilities, operations, and supporting technology controls to identify risks and recommend practical risk mitigation measures.
• Identify and assess business disruption risks and their potential impact on current business practices and strategic plans.
• Identify critical points of failure in the Bank’s ICT disaster recovery plans and recommend risk mitigation measures based on best-practice standards.
• Review and report on residual ICT risks.
• Review and improve information and cybersecurity training and awareness programmes within the Bank.
• Communicate emerging threats and risks in alignment with the existing risk profile.
• Translate complex risk, process, and control relationships into clear dashboards and reports.
• Provide risk management oversight in support of internal assessments and regulatory examinations.
• Support the development of ICT risk management practices, frameworks, and methodologies.
• Review identified gaps during ICT risk assessments, report findings, and follow up to ensure corrective actions are completed.
• Periodically review ICT and cybersecurity policies, standards, and guidelines.
• Drive customer satisfaction through timely ICT risk assessments that support business operations.
• Provide prompt feedback on internal customers’ ICT-related queries.
• Deliver assigned performance objectives and participate in professional learning, coaching, and training opportunities.

Requirements

• University degree in a relevant field; a Master's Degree is an added advantage.
• Relevant information security and risk management certifications such as CRISC, CISM, CISA, CISSP, or equivalent.
• At least four years of experience in a similar role, with exposure to banking operations, technology, or assurance functions.
• Practical knowledge of Bank of Tanzania (BoT) guidelines on ICT Risk Management.
• Practical knowledge of risk and control frameworks and their application within the financial services industry.
• Information and cybersecurity risk assessment skills.
• Knowledge of ICT controls, disaster recovery, business disruption risks, and risk mitigation.
• Ability to analyse risk and control relationships and prepare dashboards and reports.
• Strong communication, collaboration, responsiveness, and stakeholder management skills.
• Knowledge of ICT risk management practices, frameworks, and methodologies.
• Knowledge of information and cybersecurity policies, standards, and guidelines.
• Understanding of banking operations, technology, or assurance functions.
• Knowledge of Bank of Tanzania ICT Risk Management guidelines.
• Risk management and control framework expertise in the financial services industry.
• Ability to demonstrate driving for results, business savvy, building trust, and coaching and developing others.

Application Instructions

• Interested and qualified candidates should apply through the NCBA Bank careers portal.