ICT Risk Officer, Risk & Compliance

About the role

GA Insurance is hiring a full-time, on-site ICT Risk Officer in its Risk and Compliance department in Nairobi. The officer identifies, assesses, monitors and reports ICT and technology risks, providing independent oversight so that risks are managed in line with the organisation's risk appetite, regulatory requirements and business objectives. Applications close on 6 November 2026.

Key responsibilities

• Develop and maintain the ICT risk management framework, conduct risk assessments across systems, projects, infrastructure and third-party providers, and maintain the ICT Risk Register.
• Assess emerging technology risks such as cloud, digital transformation, AI and cyber risks.
• Monitor Key Risk Indicators, prepare monthly, quarterly and annual ICT risk reports, escalate significant risks and track mitigation actions.
• Monitor the security posture, investigate and manage security incidents, review vulnerability assessments and monitor tools such as SIEM, EDR, DLP and firewalls.
• Support compliance with technology risk regulations, risk reviews of new systems, business continuity and disaster recovery assessments, and internal and external ICT risk audits.
• Assess vendor technology risks, review ICT-related contracts and controls, and promote risk awareness across ICT and business functions.

Required profile

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Risk Management or a related field.
• Professional certification such as CRISC, CISA, CGEIT, ISO 31000 Risk Management or CISSP.
• Over 3 years' experience in ICT Risk, Technology Audit, IT Governance or Enterprise Risk Management; experience in regulated industries is desirable.

Required skills

• Risk assessment and analysis
• Governance and regulatory compliance
• Technology risk management
• Report writing and communication
• Stakeholder management

To apply, send an application letter and updated CV to the recruiter's email, indicating the position in the subject line.