Stima Sacco ICT Risk & Quality Assurance Officer Jobs in Kenya
Job Summary
Under the supervision of the Risk & Compliance Manager, the job holder will be responsible for implementing the ICT Risk Management Framework in line with the Society’s Strategic Plan, the Risk Management Framework and Policy, the Operations and Information Security Policies, the Society’s Business Continuity Management Policy, and the established Sacco laws and regulations and best financial service industry practices.
Key Tasks and Responsibilities
• Operationalize the Sacco’s ICT Risk Management Framework
• Establish and implement an appropriate continuous monitoring and reporting framework for Technology risks that impact on the Sacco.
• Operationalize ICT Risk Monitoring and Reporting Framework including access controls, compliance monitoring and exceptions reports monitoring.
• Spearhead ICT Vulnerability Assessment and Penetration Testing and follow-up on implementation of appropriate safeguards for identified vulnerabilities.
• Spearhead the Cyber Security efforts in the Society jointly with ICT and The Security Operations Centre (SOC).
• Conduct ICT Project and Product Risk Assessments and Quality Assurance and Participate in appropriate Application System Testing activities.
• Champion review of the Business Continuity Management (BCM) Policy, conduct Business Impact Analysis (BIA) culminating in a Business Continuity Plan for the Sacco.
• Review adherence/compliance with Society BCM Policy, BCP, ITDRP and independently participate and review tests conducted by ICT.
• Continuously review and monitor adherence/compliance with Society ICT policies
including continuously assessing the adequacy, effectiveness and compliance with ICT General and Application controls
• Participate in conduct of Society-wide Risk Awareness Training for all Departments and Branches at the Society with specific emphasis on Information System-based risk and control issues.
• Conduct risk assessment for proposed and existing products.
• Investigate root causes of ICT risks and provide support to mitigate risks.
• Considering and suggesting methods to improve ICT risk analysis and reporting to
the Management Risk Committee and the Board Audit & Risk Committee
• Keep abreast of latest ICT risk management techniques and industry best practices.
• Develop strong relationship with key stakeholders and business partners by addressing issues in a timely manner.
Person Specifications
Academic Qualifications
• A bachelor’s degree in computer science, BBIT and ICT or ICT related field from a recognized University.
Professional Qualifications
• Possess professional qualification such as CISSP, CRISC, CISA, CISM, CGEIT, CDPSE, CPA, ACCA, ACFE, ACAMS, FRM, FRR, or other risk related field.
Experience
• A minimum of five (5) years working experience in ICT in Banking Operations, Audit, Risk Management and/or Compliance practices,
Knowledge, Skills and Attributes
• Comprehensive knowledge of Enterprise Risk Management concepts, and ICT risk management concepts.
• High Analytical and problem-solving skills to be able to challenge status quo based on qualitative facts and impacts.
• Demonstrate excellent report writing and presentation skills.
• High ethical standards, integrity, and professionalism
• Planning and organization skills
• Interpersonal, communication and negotiation skills
• Knowledge of SACCO products, services, and policies
• Excellent Customer Experience skills
Key Result Areas
• Improved awareness on Information Security across the Sacco
• Updated and Approved ICT Procedures
• Improved Customer Satisfaction Index
How to Apply
For more information and job application details, see; Stima Sacco ICT Risk & Quality Assurance Officer Jobs in Kenya
Jobs in Kenya – banking jobs, IT jobs, accounting jobs, NGO jobs, business administration, ICT, UN jobs, procurement jobs, education jobs, hospital jobs, human resources jobs, engineering, teaching jobs, and other careers in Kenya.
Find your dream job from 1000s of vacancies in Kenya posted and updated daily – click here!