IT Risk Analyst at Equity Bank Kenya

In line with enhancing career progression of staff and to support business growth, we seek to recruit qualified, experienced, self-driven, highly motivated and passionate candidate to fill the position outlined below within the Risk Banking unit.

The Information Technology (IT) Risk Analyst will support the risk identification and management process across all aspects of Information Technology for the business. Responsibilities include conducting IT risk assessments on various bank initiatives assessing the current adequacy of the security controls, business continuity/disaster recovery plans, threats to the systems and calculating the impact of potential adverse events. The Analyst will keep the head of IT Risk department up to date on the results of the risk assessment and make recommendations for mitigations, or projects, to protect systems or cover potential losses.

• Proactively enforce IT Risk Policy in ensuring compliance to standards and controls designed to mitigate identified risks.
• Timely Execution of the allocated information risk management program components
• Maintaining and updating IT risk register including follow-up on closure of identified IT risk gaps until satisfactory closure of issues
• Conducting threat   and vulnerability analysis of various bank assets and programs as per the banks threat modeling program with management actions for IT risk management.
• Participate in Development and review of IT policies and procedures in compliance to regulatory requirements.
• Be aware of the application, product and system development within the business and appraise the effect and appropriateness of planned changes to the existing control framework
• Provide monthly/ Ad hoc reports to the Head of IT risk on the status of IT Risk Management Programs and Initiatives.
• Conduct self-assessments, gap assessments, risk acceptance and other control related efforts with the business, controls and compliance functions
• Stay knowledgeable of current advances in all areas of Information Technology concerning vulnerabilities, security breaches or malicious attack

 Requirement

• 2-3 three years’ experience in Banking Operations and or Information Technology
• Experience in performing analytical roles in complex business environments
• Must have a Bachelor’s degree in either Information Technology, Mathematics, Computer Science, Actuarial Science or a related field
• Certified Information Systems Auditor certification (CISA) OR Certified information security manager (CISM) OR CISSP
• Understanding of quality control process

 Desired Skills and Ability

• Ability to produce clear and concise reports to Senior Management
• Plan, organize and prioritize own work schedule in conjunction with colleagues and under the direction of head of IT risk
• Ability to deal with sensitive issues in a confidential manner
•  Excellent inter-personal skills
• Self-motivated, intuitive, innovative and creative
• A good organizer who can prioritize and adapt to meet varied deadlines. Must easily adapt within a pressurized changing environment
• Energetic and positive disposition to motivate self and others at all levels
• Articulate and analytical
• Communication – verbal and written