Senior Officer – ICT Risk
AI job insight
Kingdom Bank is seeking a Senior Officer–ICT Risk in Nairobi to provide independent assurance over the security of its IT systems. The role assesses ICT risks, reviews controls, manages risk registers, tracks remediation, and supports compliance with CBK cybersecurity guidelines and internal policies.
- Assess ICT risks across bank systems and recommend controls protecting confidentiality, integrity, and availability.
- Review servers, applications, databases, networks, and operating systems for security and compliance.
- Perform and track vulnerability assessments, penetration tests, audit findings, and remediation actions.
Similar jobs
More roles you may want to review before you leave.AI summary
Kingdom Bank is seeking a Senior Officer–ICT Risk in Nairobi to provide independent assurance over the security of its IT systems. The role assesses ICT risks, reviews controls, manages risk registers, tracks remediation, and supports compliance with CBK cybersecurity guidelines and internal policies.
- Assess ICT risks across bank systems and recommend controls protecting confidentiality, integrity, and availability.
- Review servers, applications, databases, networks, and operating systems for security and compliance.
- Perform and track vulnerability assessments, penetration tests, audit findings, and remediation actions.
- Promote information security awareness and advise ICT teams on threats, vulnerabilities, and responses.
- Full-time, 8-to-5 role reporting to the Manager–ICT Risk in Nairobi.
AI job guide
Use this guide to check salary signals, requirements, documents, application steps and safety before you apply.
AI salary guide
Not enough public dataNot enough public salary data is available for this exact role. Before applying, prepare to ask about gross pay, benefits, contract length, probation period, transport and any allowances.
Can you qualify for this role?
- UnclearRelated work experienceThe text mentions experience, but the exact level should be confirmed at source.
- RequiredEducation or certification mentioned in the postThe captured text mentions education, a diploma, certificate, or licence.
- PreferredPractical evidence in security, internship, technologyThe tags and summary point to skills connected with this role.
- RequiredAvailability to work in NairobiThe vacancy is associated with this location.
- UnclearComfort with the Full Time contract termsConfirm hours, duration, probation and benefits at the original source.
Documents to prepare
- Likely requiredUpdated CV
- Role specificCover letter or short employer message
- OptionalProfessional references
- Role specificAcademic or professional certificates
- VerifyID or passport only after verifying the employer
Application tips for this job
- Place your strongest Senior Officer – ICT Risk evidence in the first half of your CV.
- In your cover letter or employer message, connect your experience to Kingdom Bank and the role in Nairobi.
- Add concrete examples related to security, internship, technology, ideally with measurable outcomes or clear responsibilities.
- Follow the instructions from BrighterMonday Kenya; avoid sending documents to unofficial contacts or copied links.
- Confirm the deadline, interview location and employer contact before sharing personal documents.
- Prepare a polite question about pay, benefits and contract terms for later interview stages.
Source and safety check
- BrighterMonday Kenya
- Original source link available
- Application method is clear
- Deadline not specified
- No major risk signal was detected in the captured text.
Never pay for interviews, shortlisting, medical checks, uniforms, or job placement. Confirm every application at the original source before sharing personal documents. Report suspicious listing.
Interview preparation
- What experience makes you a strong fit for this Senior Officer – ICT Risk role in security, internship?
- How have you handled responsibilities similar to those in this job post?
- Are you available to work in Nairobi under the listed contract or schedule?
- Prepare examples with clear responsibilities, tools used and measurable outcomes.
- Review the source and research Kingdom Bank before the interview.
Ask what the first priorities will be in the role and how success will be measured.
Similar jobs to consider
Use AI to apply better
After confirming the original source, use Career Assistant to check role fit, tailor your CV and prepare a cover letter or employer message.
Original source description
K
Senior Officer – ICT Risk
Kingdom Bank
Software & Data
Today
New
Nairobi
Full Time
Confidential
Share link
Share on WhatsApp
Share on LinkedIn
Share on Facebook
Share on Twitter
Share via SMS
Language Requirement:
English
Work Type:
Full Time
Working Hours:
8 to 5
Applicant Location:
Kenya
Job descriptions & requirements
Senior Officer – ICT Risk
Reports to
Manager – ICT Risk
Location: Head Office
The ICT Risk Officer will provide continuous independent assurance of the bank’s Information Security as regards confidentiality, integrity and availability of the IT Systems by ensuring that appropriate security controls are in place to protect the Bank’s assets. The role holder will also ensure that ICT related risks are managed in compliance to the Bank’s policies, laws, regulatory guidelines and applicable standards.
Key Accountabilities
- Carry out ICT risk assessments of Kingdom Bank systems and provide recommendation of appropriate and adequate IT security controls to mitigate and minimize ICT Risks.
- Continuously review and improve the ICT controls in place.
- Continuously review systems at all levels i.e. servers, applications, database, network devices etc., identify risks and make recommendations on closure of the risks
- Provide continuous assurance of ICT Risks on the Bank’s systems
- Evaluate ICT controls for all operating systems, applications, database management system interfaces and networks across the Bank to ensure consistency in achieving compliance requirements (regulatory, standards and internal policies).
- Promote information security awareness within the Bank by providing consultation, guidance, and relevant awareness programs to support an information-security-compliant culture.
- Proactively anticipate potential threat and vulnerabilities and provide guidance in coordination with the ICT department on effective responses or control measures to be implemented to mitigate them.
- Manage ICT Risks registers
- Track closure of ICT audit, regulatory, vulnerability assessment, penetration testing, and risk assessment findings, and validate the adequacy of remediation actions taken by responsible teams.
- Periodically perform vulnerability assessments & penetration tests on Bank systems and technology, identifying vulnerabilities and recommendations on closure of these vulnerabilities.
- Monitor and support compliance with CBK ICT/cybersecurity guidelines, data protection requirements, and other applicable banking regulations.
- Assess ICT and cybersecurity risks arising from vendors, outsourced service providers, cloud services, fintech partners, and system integrators.
- Coordinate ICT risk input into cybersecurity incident response, including assessment of ICT risk events, escalation of material incidents, tracking of corrective actions, and reporting of lessons learned to strengthen controls.
- Review and provide assurance over ICT business continuity, disaster recovery, backup, restoration, and technology resilience arrangements to ensure critical systems support the Bank’s recovery objectives.
- Review user access, privileged access, segregation of duties, and identity lifecycle controls across critical Bank systems to identify excessive access rights, control weaknesses, and compliance gaps.
- Prepare periodic ICT risk reports, dashboards, and management updates on risk exposures, control gaps, remediation status, and emerging technology risks for relevant governance forums.
- Assess ICT and cybersecurity risks arising from system changes, new technology implementations, infrastructure upgrades, integrations, and major projects before deployment into production.
- Conduct ongoing monitoring of third-party ICT risk, including vendor security controls, service level agreements, regulatory compliance, security attestations, and remediation plans.
- Monitor the effectiveness of information security awareness initiatives through training completion, user engagement, phishing simulation results, and follow-up actions to improve security culture.
- Review cloud security, data protection, encryption, logging, monitoring, and data loss prevention controls to ensure sensitive Bank and customer information is adequately protected.
- Review the effectiveness of security monitoring, logging, alerting, vulnerability management, endpoint protection, and threat detection controls in collaboration with ICT and information security teams.
- Carry out ICT risk assessments of Kingdom Bank systems and provide recommendation of appropriate and adequate IT security controls to mitigate and minimize ICT Risks.
- Continuously review and improve the ICT controls in place.
- Continuously review systems at all levels i.e. servers, applications, database, network devices etc., identify risks and make recommendations on closure of the risks
- Provide continuous assurance of ICT Risks on the Bank’s systems
- Evaluate ICT controls for all operating systems, applications, database management system interfaces and networks across the Bank to ensure consistency in achieving compliance requirements (regulatory, standards and internal policies).
- Promote information security awareness within the Bank by providing consultation, guidance, and relevant awareness programs to support an information-security-compliant culture.
- Proactively anticipate potential threat and vulnerabilities and provide guidance in coordination with the ICT department on effective responses or control measures to be implemented to mitigate them.
- Manage ICT Risks registers
- Track closure of ICT audit, regulatory, vulnerability assessment, penetration testing, and risk assessment findings, and validate the adequacy of remediation actions taken by responsible teams.
- Periodically perform vulnerability assessments & penetration tests on Bank systems and technology, identifying vulnerabilities and recommendations on closure of these vulnerabilities.
- Monitor and support compliance with CBK ICT/cybersecurity guidelines, data protection requirements, and other applicable banking regulations.
- Assess ICT and cybersecurity risks arising from vendors, outsourced service providers, cloud services, fintech partners, and system integrators.
- Coordinate ICT risk input into cybersecurity incident response, including assessment of ICT risk events, escalation of material incidents, tracking of corrective actions, and reporting of lessons learned to strengthen controls.
- Review and provide assurance over ICT business continuity, disaster recovery, backup, restoration, and technology resilience arrangements to ensure critical systems support the Bank’s recovery objectives.
- Review user access, privileged access, segregation of duties, and identity lifecycle controls across critical Bank systems to identify excessive access rights, control weaknesses, and compliance gaps.
- Prepare periodic ICT risk reports, dashboards, and management updates on risk exposures, control gaps, remediation status, and emerging technology risks for relevant governance forums.
- Assess ICT and cybersecurity risks arising from system changes, new technology implementations, infrastructure upgrades, integrations, and major projects before deployment into production.
- Conduct ongoing monitoring of third-party ICT risk, including vendor security controls, service level agreements, regulatory compliance, security attestations, and remediation plans.
- Monitor the effectiveness of information security awareness initiatives through training completion, user engagement, phishing simulation results, and follow-up actions to improve security culture.
- Review cloud security, data protection, encryption, logging, monitoring, and data loss prevention controls to ensure sensitive Bank and customer information is adequately protected.
- Review the effectiveness of security monitoring, logging, alerting, vulnerability management, endpoint protection, and threat detection controls in collaboration with ICT and information security teams.
Qualifications
The successful candidate will be required to have the following skills and competencies:
A Bachelor’s degree in information technology, Information Security or Computer Science.
Relevant IT Security professional qualifications e.g. CISA, CISM, CEH or other relevant security certifications.
Qualifications in API review and Mobile security will be an added advantage.
A minimum of 5 years’ working experience in a similar role in a highly computerized environment.
Experience in implementing Information Security Standard such as ISO 27001, COBIT.
Understanding of ICT risk and systems security control processes
Understanding of Information systems Architecture and operational practices
Appreciation of Audit Methodologies.
Experienced in Windows Enterprise servers or UNIX systems.
Experience of working in the IT function within a banking environment will be an advantage.
Good knowledge of cybersecurity practices (Identity and Access Management, Data Protection, Penetration Testing etc.)
Senior Officer – ICT Risk
Reports to
Manager – ICT Risk
Location: Head Office
The ICT Risk Officer will provide continuous independent assurance of the bank’s Information Security as regards confidentiality, integrity and availability of the IT Systems by ensuring that appropriate security controls are in place to protect the Bank’s assets. The role holder will also ensure that ICT related risks are managed in compliance to the Bank’s policies, laws, regulatory guidelines and applicable standards.
The successful candidate will be required to have the following skills and competencies:
A Bachelor’s degree in information technology, Information Security or Computer Science.
Relevant IT Security professional qualifications e.g. CISA, CISM, CEH or other relevant security certifications.
Qualifications in API review and Mobile security will be an added advantage.
A minimum of 5 years’ working experience in a similar role in a highly computerized environment.
Experience in implementing Information Security Standard such as ISO 27001, COBIT.
Understanding of ICT risk and systems security control processes
Understanding of Information systems Architecture and operational practices
Appreciation of Audit Methodologies.
Experienced in Windows Enterprise servers or UNIX systems.
Experience of working in the IT function within a banking environment will be an advantage.
Good knowledge of cybersecurity practices (Identity and Access Management, Data Protection, Penetration Testing etc.)
Log In and Apply
Important safety tips
Do not make any payment without confirming with the BrighterMonday Customer Support Team.
If you think this advert is not genuine, please report it via the Report Job link below.
Report Job