Manager, ICT Risk – NCBA Bank

Employer: NCBA Bank
Position: Manager, ICT Risk
Job Type: Full-time
Location: Tanzania
Application: Online through NCBA Bank’s career portal
Requisition ID: 4069

Job Purpose

The Manager, ICT Risk is responsible for identifying, assessing, monitoring, and mitigating ICT and cybersecurity risks within the bank. The role supports effective risk management, regulatory compliance, technology controls, and business continuity.

Key Responsibilities

1. Internal Business Processes – 75%

• Conduct ICT risk assessments and evaluate the effectiveness of technical and procedural controls.
• Provide practical recommendations to management for mitigating identified risks.
• Assess the bank’s information and cybersecurity capabilities, operations, and technology controls.
• Identify risks associated with business disruption and assess their potential impact.
• Identify critical points of failure within ICT disaster recovery plans.
• Recommend mitigation measures based on industry best practices.
• Review and report on residual ICT risks.
• Review and improve Information and Cyber Security training and awareness programmes.
• Identify and communicate emerging ICT and cybersecurity threats in relation to the bank’s risk profile.
• Convert complex risk, process, and control relationships into clear dashboards and reports.
• Support internal assessments and regulatory examinations through effective risk management oversight.
• Support development of ICT risk management practices, frameworks, and methodologies.
• Review, report, and follow up on gaps identified during ICT risk assessments.
• Periodically review ICT and cybersecurity policies, standards, and guidelines.

2. Customer – 15%

• Support customer satisfaction through timely ICT risk assessments.
• Provide prompt responses to internal customer queries relating to ICT risks.

3. Learning & Growth – 10%

• Deliver agreed performance objectives.
• Take responsibility for continuous learning and professional development.
• Participate in coaching and training opportunities.
• Continuously build professional capacity in ICT risk management.

Academic Qualifications

Required:

• University degree in a relevant field.

Added Advantage:

• Master’s degree.

Professional Certifications

Relevant certifications in information security and risk management are preferred, including:

• CRISC – Certified in Risk and Information Systems Control
• CISM – Certified Information Security Manager
• CISA – Certified Information Systems Auditor
• CISSP – Certified Information Systems Security Professional
• Equivalent certifications.

Work Experience

• At least 4 years’ experience in a similar role.
• Experience should include exposure to:
  • Banking operations
  • Technology
  • Assurance functions

Technical Knowledge

Candidates should have:

• Practical knowledge of Bank of Tanzania (BoT) guidelines on ICT Risk Management.
• Practical knowledge of risk and control frameworks.
• Ability to apply risk and control frameworks within the financial services industry.
• Knowledge of ICT and cybersecurity risk assessment.
• Knowledge of disaster recovery and business continuity risks.
• Understanding of technology controls and cybersecurity governance.

Key Stakeholders

Internal

• Business Units
• Technology & Operations
• Enterprise Projects Team
• Internal Audit

External

• Vendors
• External Auditors

Core Competencies

The position requires intermediate-level capability in:

• Driving for Results
• Business Savvy
• Selling the Vision
• Fostering Collaboration
• Responsiveness
• Coaching & Developing Others
• Building Trust
• Openness
• Building Organizational Talent
• Empowerment & Delegation

How to Apply

Applications should be submitted through the NCBA Bank career portal using Requisition ID 4069.

CLICK HERE TO APPLY