Assistant Manager, ICT Risk at NCBA Bank Tanzania

Job description

Organization: NCBA BankRequisition ID: 4069Posted: 21 October 2026 JOB PURPOSE STATEMENT The source includes a Job Purpose Statement heading but does not provide any text under this section. KEY ACCOUNTABILITIES, DUTIES AND RESPONSIBILITIES Internal Business Processes - 75% Undertake risk assessments, analyse the effectiveness of technical and procedural control activities, and provide actionable recommendations to management. Assess the Bank’s Information and Cyber Security capabilities, operations and supporting technology controls to identify risks and recommend pragmatic risk mitigation measures. Identify and assess business disruption risks and their impacts associated with current business practices and strategic plans. Identify critical points of failure in the Bank’s ICT disaster recovery plans and recommend risk mitigation measures based on best practice standards. Review and report on residual ICT risks. Review and improve training and awareness programmes for Information and Cyber Security in the Bank. Succinctly frame emerging threats and risks in alignment with the existing risk profile. Distil complex risk, process and control relationships into simple dashboards/reports. Demonstrate robust risk management oversight in supporting various internal assessments and regulatory examinations. Support the development of the IT Risk Management practice, framework and methodologies. Review, report and follow up on closure of any gaps noted during ICT risk assessments. Periodically review ICT and Cyber Security policies, standards and guidelines. Customer - 15% Drive customer satisfaction through timely ICT risk assessments that have been put in place to support business. Provide prompt feedback on internal customer queries on ICT. Learning and Growth - 10% Responsible for delivering the performance objectives set and managing his/her own learning and development to build capacity and avail him/herself for coaching and training opportunities. JOB SPECIFICATIONS University Degree in a relevant field. Master’s Degree will be an added advantage. Relevant certifications in Information Security and Risk Management knowledge areas, such as: CRISC CISM CISA CISSP Or equivalent At least 4 years’ experience in a similar role with exposure to: Banking operations Technology Assurance functions Practical knowledge of BOT guidelines on ICT Risk Management. Practical knowledge of risk and control frameworks and their application within the Financial Services industry. JOB DIMENSIONS Reporting Relationships Jobs that report to this position directly and indirectly: Direct Reports Not stated in the source. Indirect Reports Not stated in the source. STAKEHOLDER MANAGEMENT Key stakeholders that the position holder will need to liaise/work with to be successful in this role include: Internal Stakeholders Business Units Technology & Operations Enterprise Projects Team Internal Audit External Stakeholders Vendors External Auditors NCBA BANK CORE VALUE BEHAVIOURS Driving for Results: Intermediate Business Savy: Intermediate Selling the Vision: Intermediate Fostering Collaboration: Intermediate Responsiveness: Intermediate Coaching & Developing Others: Intermediate Building Trust: Intermediate Openness: Intermediate Building Organizational Talent: Intermediate Empowerment & Delegation: Intermediate