Scribd
Upload
7 views2 pages

ICT Risk Quality Assurance Officer

The document is an external advertisement for the position of ICT Risk & Quality Assurance Officer, responsible for establishing and implementing an ICT Risk Management Framework aligned with the Society's strategic goals and compliance policies. Key responsibilities include developing risk management frameworks, conducting vulnerability assessments, and ensuring adherence to ICT policies. Applicants should have a relevant degree, professional qualifications, and at least five years of experience in ICT risk management or related fields.

Uploaded by

mulandijones2
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
7 views2 pages

ICT Risk Quality Assurance Officer

The document is an external advertisement for the position of ICT Risk & Quality Assurance Officer, responsible for establishing and implementing an ICT Risk Management Framework aligned with the Society's strategic goals and compliance policies. Key responsibilities include developing risk management frameworks, conducting vulnerability assessments, and ensuring adherence to ICT policies. Applicants should have a relevant degree, professional qualifications, and at least five years of experience in ICT risk management or related fields.

Uploaded by

mulandijones2
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

EXTERNAL ADVERTISEMENT

ICT RISK & QUALITY ASSURANCE OFFICER

Job Summary
Under the supervision of the Risk & Compliance Manager, the job holder will be responsible
for establishing and implementing an appropriate ICT Risk Management Framework in line
with the Society’s Strategic Plan, the Risk Management Framework and Policy, the Operations
and Information Security Policies, the Society’s Business Continuity Management Policy, and
the established Sacco laws and regulations and best financial service industry practices.

Key Tasks and Responsibilities


• Develop and operationalize the Sacco’s ICT Risk Management Framework
• Establish and implement an appropriate continuous monitoring and reporting framework
for Technology risks that impact on the Sacco.
• Operationalize ICT Risk Monitoring and Reporting Framework including access controls,
compliance monitoring and exceptions reports monitoring.
• Spearhead ICT Vulnerability Assessment and Penetration Testing and follow-up on
implementation of appropriate safeguards for identified vulnerabilities.
• Spearhead the Cyber Security efforts in the Society jointly with ICT and The Security
Operations Centre (SOC).
• Conduct ICT Project and Product Risk Assessments and Quality Assurance and
Participate in appropriate Application System Testing activities.
• Champion review of the Business Continuity Management (BCM) Policy, conduct
Business Impact Analysis (BIA) culminating in a Business Continuity Plan for the Sacco.
• Review adherence/compliance with Society BCM Policy, BCP, ITDRP and
independently participate and review tests conducted by ICT.
• Continuously review and monitor adherence/compliance with Society ICT policies
including continuously assessing the adequacy, effectiveness and compliance with ICT
General and Application controls
• Participate in conduct of Society-wide Risk Awareness Training for all Departments and
Branches at the Society with specific emphasis on Information System-based risk and
control issues.
• Conduct risk assessment for proposed and existing products.
• Investigate root causes of ICT risks and provide support to mitigate risks.
• Considering and suggesting methods to improve ICT risk analysis and reporting to the
Management Risk Committee and the Board Audit & Risk Committee
• Keep abreast of latest ICT risk management techniques and industry best practices.
• Develop strong relationship with key stakeholders and business partners by addressing issues in a
timely manner.

PERSON SPECIFICATIONS

Academic Qualifications

• A bachelor’s degree in computer science, BBIT and ICT or ICT related field from a
recognized University.

Professional Qualifications

• Possess professional qualification such as CISSP, CRISC, CISA, CISM, CGEIT, CDPSE,
CPA, ACCA, ACFE, ACAMS, FRM, FRR, or other risk related field.

Experience

• A minimum of five (5) years working experience in ICT in Banking Operations, Audit,
Risk Management and/or Compliance practices,

Knowledge, Skills and Attributes

• Comprehensive knowledge of Enterprise Risk Management concepts, and ICT risk


management concepts.
• High Analytical and problem-solving skills to be able to challenge status quo based on
qualitative facts and impacts.
• Demonstrate excellent report writing and presentation skills.
• High ethical standards, integrity, and professionalism
• Planning and organization skills
• Interpersonal, communication and negotiation skills
• Knowledge of SACCO products, services, and policies
• Excellent Customer Experience skills

Key Result Areas

• Improved awareness on Information Security across the Sacco


• Updated and Approved ICT Procedures
• Improved Customer Satisfaction Index

Qualified applicants should apply on or before 5pm on Thursday, 13th July 2023 using
the link provided
Only Shortlisted Candidates will be contacted

You might also like