ICT RISK OFFICER @ DCB COMMERCIAL BANK PLC
DCB Commercial Bank Plc is a fully-fledged retail and commercial bank in Tanzania, offering comprehensive financial services to individuals, microfinance institutions, small and medium-sized enterprises (MSMEs), and large corporate clients. The bank is committed to serving over 3 million customers through an extensive network that includes over 8 branches, more than 1,000 DCB Wakala Agents, and over 280 Umoja Switch ATMs across the country.
The bank is actively seeking a qualified and experienced ICT Risk Officer to join its dedicated team. This critical role is designed for a professional who will take charge of implementing, monitoring, and maintaining the bank’s information security, ICT risk management, business continuity, and data protection frameworks. The successful candidate will ensure full compliance with all relevant regulatory requirements, safeguarding the bank's digital assets and operational integrity.
Key responsibilities for this position include performing security and cyber resilience risk assessments for various projects, systems, and business units. The officer will oversee cybersecurity monitoring and incident management activities, which encompass vulnerability assessments, penetration testing, and continuous security event and incident log monitoring. They will also be responsible for conducting reviews and testing of Information Technology General Controls (ITGCs) and managing user access and privileged accounts across applications, servers, and databases to enforce appropriate access controls.
Furthermore, the ICT Risk Officer will play a pivotal role in developing, implementing, and monitoring robust ICT risk and information security policies and frameworks, including Business Continuity Management (BCM), Business Continuity Plans (BCPs), and Disaster Recovery Plans (DRP). Ensuring compliance with the Personal Data Protection Act and other regulatory requirements, such as reporting data protection violations and maintaining the bank’s registration as a Data Controller and/or Data Processor, will also be central to the role. The officer will conduct staff awareness and training programmes on cybersecurity, ICT risks, and data protection, and coordinate the timely closure of internal audit and regulatory findings to ensure effective implementation of corrective actions. Finally, this role will act as the primary liaison with regulators and external agencies on all matters related to ICT risk, information security, and compliance.
Applicants should possess a Bachelor’s Degree in Information Systems, Computer Science, Information Technology, or another related field from a recognized institution. Professional certifications such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or Certified Information Security Manager (CISM) are considered a significant advantage. The ideal candidate will have a minimum of 2 years of relevant experience within a highly automated ICT environment, demonstrating proficiency in Microsoft Office applications. Additionally, strong analytical, problem-solving, communication, and organizational skills are essential for success in this role.
The bank is actively seeking a qualified and experienced ICT Risk Officer to join its dedicated team. This critical role is designed for a professional who will take charge of implementing, monitoring, and maintaining the bank’s information security, ICT risk management, business continuity, and data protection frameworks. The successful candidate will ensure full compliance with all relevant regulatory requirements, safeguarding the bank's digital assets and operational integrity.
Key responsibilities for this position include performing security and cyber resilience risk assessments for various projects, systems, and business units. The officer will oversee cybersecurity monitoring and incident management activities, which encompass vulnerability assessments, penetration testing, and continuous security event and incident log monitoring. They will also be responsible for conducting reviews and testing of Information Technology General Controls (ITGCs) and managing user access and privileged accounts across applications, servers, and databases to enforce appropriate access controls.
Furthermore, the ICT Risk Officer will play a pivotal role in developing, implementing, and monitoring robust ICT risk and information security policies and frameworks, including Business Continuity Management (BCM), Business Continuity Plans (BCPs), and Disaster Recovery Plans (DRP). Ensuring compliance with the Personal Data Protection Act and other regulatory requirements, such as reporting data protection violations and maintaining the bank’s registration as a Data Controller and/or Data Processor, will also be central to the role. The officer will conduct staff awareness and training programmes on cybersecurity, ICT risks, and data protection, and coordinate the timely closure of internal audit and regulatory findings to ensure effective implementation of corrective actions. Finally, this role will act as the primary liaison with regulators and external agencies on all matters related to ICT risk, information security, and compliance.
Applicants should possess a Bachelor’s Degree in Information Systems, Computer Science, Information Technology, or another related field from a recognized institution. Professional certifications such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or Certified Information Security Manager (CISM) are considered a significant advantage. The ideal candidate will have a minimum of 2 years of relevant experience within a highly automated ICT environment, demonstrating proficiency in Microsoft Office applications. Additionally, strong analytical, problem-solving, communication, and organizational skills are essential for success in this role.
Key Requirements
Bachelor’s Degree in Information Systems, Computer Science, Information Technology, or a related field
Professional certification such as CISA, CRISC, or CISM (added advantage)
Minimum 2 years’ relevant experience in a highly automated ICT environment
Proficiency in Microsoft Office applications
Strong analytical skills
Strong problem-solving skills
Strong communication skills
Strong organizational skills