Officer, Digital Financial Services & Project Risks
AI job insight
Sidian Bank is seeking a Middle-level Officer in Nairobi to provide independent second-line oversight of digital financial services, IT controls, and project risks. The role requires at least five years of banking or IT experience and an IT or Business degree, with ISO 27001/NIST knowledge or CISA/Security+ certification. The deadline is 25 October 2026.
- Provides independent second-line assurance for digital banking and project risks.
- Covers DFS channels, digital lending, merchant acquiring, and data pipelines.
- Requires 5+ years of banking or IT experience.
Similar jobs
More roles you may want to review before you leave.AI summary
Sidian Bank is seeking a Middle-level Officer in Nairobi to provide independent second-line oversight of digital financial services, IT controls, and project risks. The role requires at least five years of banking or IT experience and an IT or Business degree, with ISO 27001/NIST knowledge or CISA/Security+ certification. The deadline is 25 October 2026.
- Provides independent second-line assurance for digital banking and project risks.
- Covers DFS channels, digital lending, merchant acquiring, and data pipelines.
- Requires 5+ years of banking or IT experience.
- Supports CBK, Kenya DPA 2019, and ODPC compliance.
- Full-time role in Nairobi; deadline is 25 October 2026.
AI job guide
Use this guide to check salary signals, requirements, documents, application steps and safety before you apply.
AI salary guide
Not enough public dataNot enough public salary data is available for this exact role. Before applying, prepare to ask about gross pay, benefits, contract length, probation period, transport and any allowances.
Can you qualify for this role?
- Required5+ years of relevant experienceThe job post includes a minimum experience signal.
- RequiredEducation or certification mentioned in the postThe captured text mentions education, a diploma, certificate, or licence.
- PreferredPractical evidence in security, internship, segurancaThe tags and summary point to skills connected with this role.
- RequiredAvailability to work in NairobiThe vacancy is associated with this location.
- UnclearComfort with the Full Time contract termsConfirm hours, duration, probation and benefits at the original source.
Documents to prepare
- Likely requiredUpdated CV
- Role specificCover letter or short employer message
- OptionalProfessional references
- Role specificAcademic or professional certificates
- VerifyID or passport only after verifying the employer
Application tips for this job
- Place your strongest Officer, Digital Financial Services & Project Risks evidence in the first half of your CV.
- In your cover letter or employer message, connect your experience to Sidian Bank and the role in Nairobi.
- Add concrete examples related to security, internship, seguranca, ideally with measurable outcomes or clear responsibilities.
- Follow the instructions from Corporate Staffing Kenya; avoid sending documents to unofficial contacts or copied links.
- Confirm the deadline, interview location and employer contact before sharing personal documents.
- Plan to submit before the listed deadline: 2026-10-25.
Source and safety check
- Corporate Staffing Kenya
- Original source link available
- Application method is clear
- Deadline is available: 2026-10-25
- No major risk signal was detected in the captured text.
Never pay for interviews, shortlisting, medical checks, uniforms, or job placement. Confirm every application at the original source before sharing personal documents. Report suspicious listing.
Interview preparation
- What experience makes you a strong fit for this Officer, Digital Financial Services & Project Risks role in security, internship?
- How have you handled responsibilities similar to those in this job post?
- Are you available to work in Nairobi under the listed contract or schedule?
- Prepare examples with clear responsibilities, tools used and measurable outcomes.
- Review the source and research Sidian Bank before the interview.
Ask what the first priorities will be in the role and how success will be measured.
Similar jobs to consider
Use AI to apply better
After confirming the original source, use Career Assistant to check role fit, tailor your CV and prepare a cover letter or employer message.
Original source description
Job Title: Officer, Digital Financial Services & Project Risks
Date Posted: 22/10/2026
Job Type: Full Time
Job Level: Middle
Employer: Sidian Bank
Industry: Finance
Salary: Open
Location: Nairobi
Country: Kenya
Deadline: 25/10/2026
IT Jobs, Sidian Bank Jobs. Officer, Digital Financial Services & Project Risks manages IT risk and security controls for DFS projects, requires an IT/Business degree, knowledge of ISO 27001/NIST (or CISA/Security+ certification), and 5+ years banking/IT experience. Full-time role in Nairobi.
Job Purpose
The job holder will assist in providing continuous, independent 2nd line assurance on the Bank’s Digital Financial Services (DFS) Control and project risks undertaken by the bank. The role delivers objective oversight on control design and operating effectiveness across Digital Financial Services channels, Digital Lending platforms, Merchant Acquiring, and Data Lake pipelines & Projects. The role holder will also ensure that all Digital Financial Services, operational and systems risks across Bank platforms are managed in strict compliance with internal policies, CBK & ODPC guidelines.
Key Responsibilities
- Governance and Regulatory Compliance
- IT Risk and Data Impact Assessment
- Business Continuity and Disaster Recovery Coordination
- Systems Monitoring and Control Review
- Incident and Breach Management
- Reporting
- Governance and Regulatory Compliance
- Maintain 2nd Line governance oversight ensuring all digital banking operations, credit scoring algorithms, and data processing architectures comply with CBK guidelines, statutory limits, and ODPC regulatory requirements.
- Collaborate with the Data Privacy Officer to ensure DFS data flows, processing activities, and Data Lake ingestion pipelines align with statutory requirements under the Kenya DPA 2019 & regulations.
- Provide objective 2nd Line oversight and challenge on the design and operational effectiveness of control systems and workflows across all DFS channels.
- Validate that all approved products are supported by end-to-end standard operating procedures (SOPs), workflow routines, and dual-authorization control frameworks signed off by all relevant stakeholders prior to launch.
- It Risk and Data Impact Assessment
- Coordinate directly with the ERM, IT Risk Officer to evaluate technical vulnerabilities, system change management requests, API security controls, and Privileged Access Management (PAM) across the bank’s DFS systems and projects.
- Review risk profiles and control baselines for new feature deployments, digital lending engines, third-party integrations, and Data Lake ingestion controls prior to production go-live.
- Review technical documentation for products involving DFS products and projects (i.e. solution architecture, process and data flow diagrams) for comprehensive risk identification an controls design effectiveness reviews.
- Track the remediation of technical control gaps, vulnerability assessment items, and any red-teaming test findings to final closure on DFS and Projects.
- Business Continuity and Disaster Recovery Coordination
- Oversee BCP and Disaster Recovery (DR) readiness for critical digital channels (Mobile Banking, Internet Banking, USSD, Merchant, Digital Lending engines, and Data Lake feeds).
- Participate in periodic BCP/DR failover tests, assessing operational resilience, recovery time objectives (RTO), and recovery point objectives (RPO) during simulated switchover events for DFS projects.
- Validate that failback routines, offline processing queues, and manual reconciliation procedures during system outages maintain strict accounting controls and data integrity.
- Systems Monitoring and Control Review
- Digital Lending Controls – Monitor loan scoring parameters, automated approval thresholds, disbursement limits, and write-off reconciliation routines including review of controls around use of AI in DFS products.
- Merchant Acquiring Controls – Review merchant transaction limits, merchant float reconciliations, fee splits, and chargeback handling; review merchant settlement controls, chargeback/reversal workflows, transaction limits, and interchange fee collection routines across merchant acquiring deployment & other controls e.g. on automated credit scoring parameters, AI controls in DFS deployments.
- Develop and monitor DFS control metrics, project risk indicators, and operational KRI’s, and assist in the development of breach thresholds.
- Ensure all DFS and project risks are comprehensively captured and tracked through the business RCSA.
- Perform independent control tests and validate both design adequacy and operational effectiveness of controls.
- Incident and Breach Management
- Review and evaluate the effectiveness of automated monitoring systems with independent sample testing of the implemented DFS controls/rule exceptions and override queues to ensure digital fraud and operational failures are promptly detected and remediated by 1st Line teams.
- Support the investigation, logging, and root-cause analysis of digital transaction failures, payment outages, and privacy breaches in coordination with the Data Protection & Privacy Officer.
- Track incident remediation action plans, ensuring 1st Line operational teams resolve underlying system flaws to prevent recurring outages or losses.
- Reporting
- Formulate and maintain and report on Key Risk Indicators (KRIs) on CSA) for DFS solutions, Digital Lending, Merchant Acquiring, and Data Lake operations & Projects
- Prepare comprehensive 2nd Line risk and control performance dashboards for IT Risk, BCP & Data Privacy for Senior Management & Board Risk Reports on DFS and projects.
- Academic Background
- Bachelor’s degree in Information Technology, Computer science, business, or related fields.
- Strong knowledge of Information Security related frameworks/ Regulations/such as, ISO 27001, NIST 800-53 or other leading industry certifications e.g. CompTIA Security +, CEH, CISA.
- At least 5 years of Banking or Information Technology Experience with exposure to Digital Financial Services (DFS) & Projects.
- Knowledgeable in IT operations, IT Controls, IT Risk, IT Audit & Project Management.
- Knowledge on Data Protection laws & General Data Protection Regulations (GDPR)/Kenya Data Protection Act, 2019 & Regulations, CBK guidelines.
- Skills & Competencies
- Excellent interpersonal & Communication Skills
- Working in Teams
- Excellent analytical skills
- Problem solving skills
- Excellent knowledge of security tools
- Report writing skills
- Professional Certification
- Professional qualifications such as Certified Information Systems Security Professional CISA, Certified Information Systems Security Professional CISM or Certified Information Systems Security Professional (CISSP).