Technology Risk Manager (IT)

About the role

The Manager, Technology (IT) Risk will lead the bank’s technology risk management framework, ensuring effective oversight of IT infrastructure, cybersecurity, data protection and digital transformation initiatives.

Key responsibilities

• Develop, implement and maintain the Technology Risk Management Framework aligned with regulatory standards such as NIST, ISO 27001, COBIT and Basel.
• Conduct technology risk assessments, IT control testing, RCSA and scenario analysis, and identify emerging risks including cyber threats, third‑party and cloud risks.
• Collaborate with Information Security and IT teams to monitor cyber incidents, ensure data protection compliance (GDPR, Kenya Data Protection Act) and oversee remediation.
• Manage third‑party vendor risk, perform due diligence and continuous monitoring of critical IT service providers.
• Coordinate regulatory compliance, audit liaison and closure of IT risk audit findings.
• Support disaster recovery, business continuity planning and incident response for technology disruptions.
• Prepare and present technology risk reports, dashboards and KRIs to senior management and governance bodies.

Required profile

• Bachelor’s degree in Computer Science, IT, Risk Management or related field; Master’s degree is a plus.
• 5‑7 years of experience in technology risk management, cybersecurity or audit within banking or financial services.
• Strong knowledge of CBK ICT Risk Guidelines, Basel Accords, NIST, GDPR, Kenya Data Protection Act and ISO 27001.
• Professional certifications such as CISA, CRISC, CISSP or ITIL are highly preferred.

Required skills

• Technology risk frameworks (NIST, ISO 27001, COBIT, Basel).
• Cybersecurity threat analysis and incident response.
• Data protection regulations (GDPR, Kenya Data Protection Act).
• IT control testing, RCSA and scenario analysis.
• Third‑party and cloud vendor risk management.
• Audit coordination and regulatory compliance.