Technology Business Control Assurance Manager at Equity Bank Kenya

Description 

The Technology Business Control Assurance Manager is responsible for providing independent assurance over the design and operating effectiveness of technology controls that support critical business processes, ensuring alignment with business objectives, regulatory requirements, and the organization's risk appetite.  

The Technology Business Control Assurance Manager will proactively identify, assess, and mitigate technology-related risks, fostering a culture of strong controls and continuous improvement across the technology function. 

Job Responsibilities/ Accountabilities:  

• Collaborate with business stakeholders to understand key business processes and translate business objectives into specific technology control requirements. 
• Design and implement control frameworks that align with industry best practices (e.g., COBIT, NIST, ISO 27001), regulatory requirements (e.g., GDPR), and internal organizational policies. 
• Develop and maintain control documentation, including control descriptions, risk assessments, and testing procedures. 
• Assessing and monitoring the adequacy and effectiveness of internal controls related to IT processes, systems and operations. 
• Collaborate with various business stakeholders to design and implement control frameworks that align with regulatory requirements and organizational policies. 
• Conduct regular audits and control self-assessments to identify control and process weaknesses, recommend improvements and track the implementation of corrective actions.  
• Utilize data analytics techniques to perform continuous control monitoring, identifying anomalies and potential control failures. 
• Track the implementation of corrective actions, validating that they effectively address identified control weaknesses. 
• Provide training and guidance to teams on control best practices ensuring a strong control environment.  
• Prepare reports for senior management and stakeholders highlighting control performance, compliance status, and emerging risks. 
• Communicate control-related matters to various audiences, including technical teams, business stakeholders, and senior management. 
• Promote a culture of accountability and continuous improvement within the technology function. 
• Monitor and assess risks associated with emerging technologies (e.g., cloud computing, artificial intelligence, blockchain). 

Qualifications 

Knowledge and Experience  

• Bachelor's or Master's degree in Information Technology, Computer Science, or a related field. 
• Hold relevant industry certifications (e.g., CISM, CRISC, CGEIT, CISSP) 
• Minimum of 7-10 years of experience in IT audit, risk management, compliance, or a related role. 
• Experience in performing IT risk assessments and control self-assessments. 
• Proficiency in using data analytics tools and techniques for continuous control monitoring. 

Key Critical Competencies & Skills  

• Excellent in preparation of reports, dashboards and documentation  
• Strong understanding of Legal, Risk, Compliance, and Cybersecurity concerns 
• Strong analytical and problem-solving skills. 
• Excellent communication, interpersonal, and presentation skills. 
• Ability to work effectively with cross-functional teams. 
• Proficiency in analysis and presentations skills using MS Excel, MS Word and MS PowerPoint.