IT RISK MANAGER
Job Summary
Responsible for enterprise-wide IT Risk Assessment planning, execution and coordination of Accion MFB by ensuring confidentiality, integrity and adequate support to Accion MFB Business processes. Also to assist the Head, Risk Control and Compliance in providing a view on significant I.T risks within the Bank and to provide assurance on adequacy, effectiveness & efficiency of the system controls by conducting a planned IT risk assessment.
- Minimum Qualification: Degree
- Experience Level: Senior level
- Experience Length: 10 years
Job Description/Requirements
Job Description- Areas of Responsibility
To Support the Head, Risk Control and Compliance in understanding and developing the I.T Risk assessment strategy, plans and I.T risk-related issues at business and operational level.
Prepares IT risk assessment plan which includes all Units and processes in Information Technology department.
Communicate risk assessment results to appropriate parties; ensure that issues are addressed and corrective actions are implemented.
Collect information and review documentation to ensure that risk scenarios are identified and evaluated.
Performs vulnerability scan of servers and network devices to ascertain vulnerabilities inherent in them with a view to remediating the identified gaps.
Carry out user management on the Core Banking application (T24). Also, supervise the activities of the System Control Officer.
Participate in IT projects and initiatives to bring pro-active risk management focus into solutions.
Ensure that all IT policies and procedures are compliant with regulatory requirements.
Test information systems controls to verify effectiveness and efficiency prior to implementation.
Develop and implement risk responses to ensure that risk factors and events are addressed in a cost-effective manner and in line with business objectives.
Develop a risk awareness program to ensure that stakeholders understand risk and contribute to the risk management process and to promote a risk-aware culture.
Create and maintain a risk register to ensure that all identified risk factors are accounted for.
Follow-up on Internal Audit report to ensure that IT control issues highlighted are resolved within appropriate timeline.
Other activities as may be assigned by the Head, Risk Control and Compliance
Qualification
Master & Bachelor’s Degree in any of Accounting, Science, Engineering, Mathematics, Information Technology
CISA certifications.
10+ years of IT Risk/Auditing/Control experience
Required Knowledge –
Proficient in using computer software (e.g., SQL, Excel) and application systems
Familiarity with Core Banking Application systems like Temenos T24 Banking Software.
Knowledge of Risk assessment processes/procedures
Ability to balance detail with departmental goals/objectives
Ability to coordinate and perform multiple tasks/projects simultaneously, balancing priorities and deliverables.
Competent interpersonal skills, demonstrating the ability to lead projects and mentor others
Ability to evaluate business processes and IT technology, identify risks and evaluate controls.
Written communication skills, ability to share and impart knowledge
Ability to translate business needs and problems into viable and accepted solutions.
Ability to liaise with individuals across a wide variety of operational, functional, and technical disciplines.
Organizational and time management skills
Ability to work independently
Ability to work well within a team environment and participate in department projects.
Ability to impart knowledge and develop the competencies of direct reports.