Manager, Technology (IT) Risk (EBKL)

Equity Bank Limited (The “Bank”) is incorporated, registered under the Kenyan Companies Act Cap 486 and domiciled in Kenya. The address of the Bank’s registered office is 9th Floor, Equity Centre, P.O. Box 75104 – 00200 Nairobi. The Bank is licensed under the Kenya Banking Act (Chapter 488), and continues to offer retail banking, microfinance and relat…

Manager, Technology (IT) Risk (EBKL)

Job Purpose

The Manager, Technology (IT) Risk is responsible for overseeing the bank’s technology risk management framework, ensuring that risks related to IT infrastructure, cybersecurity, data protection, and digital transformation initiatives are effectively managed. This role works closely with IT, cybersecurity, and risk management teams to identify, assess, monitor, and mitigate technology-related risks while ensuring compliance with regulatory requirements and best practices.

Key Responsibilities

Technology Risk Framework Implementation

• Develop, implement, and maintain the bank’s Technology Risk Management Framework in alignment with regulatory requirements and industry standards (e.g., NIST, ISO 27001, COBIT, Basel).

• Ensure technology risk policies, procedures, and controls are effectively embedded across all business units.

Risk Identification, Assessment & Mitigation

• Conduct technology risk assessments, including IT control testing, risk control self-assessments (RCSA), and scenario analysis.

• Identify emerging risks related to cybersecurity threats, third-party IT risks, cloud computing, AI, and digital banking platforms.

• Implement risk mitigation measures to strengthen IT security and resilience.

Cybersecurity & Data Protection Oversight

• Work closely with the Information Security and IT teams to assess cyber threats, vulnerabilities, and incident response strategies.

• Ensure compliance with data protection laws (e.g., GDPR, Kenya Data Protection Act) and regulatory requirements.

• Monitor cybersecurity incidents and oversee remediation efforts.

Third-Party & Vendor Risk Management

• Assess technology risks associated with third-party vendors, cloud service providers, and IT outsourcing arrangements.

• Conduct due diligence and continuous monitoring of critical IT service providers.

Regulatory Compliance & Audit Coordination

• Ensure adherence to local and international regulatory requirements, including CBK ICT Risk Guidelines, Basel III, and ISO standards.

• Act as the liaison between IT, internal audit, and external regulatory bodies during technology risk audits.

• Address and close audit findings related to IT risk.

Business Continuity & Incident Management