Manager, Technology (IT) Risk

About the role

The Manager, Technology (IT) Risk is responsible for overseeing Equity Bank’s technology risk management framework. The role ensures that risks related to IT infrastructure, cybersecurity, data protection, and digital transformation are effectively identified, assessed, mitigated, and monitored.

Key responsibilities

• Develop, implement and maintain the Technology Risk Management Framework in line with regulatory standards such as NIST, ISO 27001, COBIT and Basel.
• Conduct technology risk assessments, including IT control testing, RCSA, scenario analysis and emerging risk identification (cyber threats, third‑party, cloud, AI, digital banking).
• Work with Information Security and IT teams to monitor cyber threats, manage incidents and ensure compliance with GDPR and the Kenya Data Protection Act.
• Assess and manage third‑party and vendor technology risks, performing due diligence and continuous monitoring of critical service providers.
• Coordinate regulatory compliance and audit activities, acting as liaison with internal audit and external regulators.
• Support business continuity, disaster recovery and incident response initiatives, ensuring timely reporting of IT disruptions.
• Prepare and present technology risk reports, dashboards and KRIs to senior management and the board.

Required profile

• Bachelor’s degree in Computer Science, IT, Risk Management, Cybersecurity or related field; Master’s degree is a plus.
• 5‑7 years of experience in technology risk management, IT security, cybersecurity or audit within banking or financial services.
• Professional certifications such as CISA, CRISC, CISSP or ITIL are highly preferred.
• Strong knowledge of CBK ICT Risk Guidelines, Basel Accords, NIST Cybersecurity Framework, GDPR, Kenya Data Protection Act and ISO 27001.

Required skills

• Technology risk frameworks: NIST, ISO 27001, COBIT, Basel.
• Risk assessment methodologies: RCSA, scenario analysis.
• Cybersecurity standards and incident management.
• Third‑party/vendor risk management.
• Regulatory compliance and audit coordination.
• Professional certifications: CISA, CRISC, CISSP, ITIL.