Assistant Manager, ICT Risk at NCBA Bank Tanzania

Organization: NCBA Bank
Requisition ID: 4069
Posted: 21 October 2026

JOB PURPOSE STATEMENT

The source includes a Job Purpose Statement heading but does not provide any text under this section.

KEY ACCOUNTABILITIES, DUTIES AND RESPONSIBILITIES

Internal Business Processes - 75%

• Undertake risk assessments, analyse the effectiveness of technical and procedural control activities, and provide actionable recommendations to management.
• Assess the Bank’s Information and Cyber Security capabilities, operations and supporting technology controls to identify risks and recommend pragmatic risk mitigation measures.
• Identify and assess business disruption risks and their impacts associated with current business practices and strategic plans.
• Identify critical points of failure in the Bank’s ICT disaster recovery plans and recommend risk mitigation measures based on best practice standards.
• Review and report on residual ICT risks.
• Review and improve training and awareness programmes for Information and Cyber Security in the Bank.
• Succinctly frame emerging threats and risks in alignment with the existing risk profile.
• Distil complex risk, process and control relationships into simple dashboards/reports.
• Demonstrate robust risk management oversight in supporting various internal assessments and regulatory examinations.
• Support the development of the IT Risk Management practice, framework and methodologies.
• Review, report and follow up on closure of any gaps noted during ICT risk assessments.
• Periodically review ICT and Cyber Security policies, standards and guidelines.

Customer - 15%

• Drive customer satisfaction through timely ICT risk assessments that have been put in place to support business.
• Provide prompt feedback on internal customer queries on ICT.

Learning and Growth - 10%

Responsible for delivering the performance objectives set and managing his/her own learning and development to build capacity and avail him/herself for coaching and training opportunities.

JOB SPECIFICATIONS

• University Degree in a relevant field.
• Master’s Degree will be an added advantage.
• Relevant certifications in Information Security and Risk Management knowledge areas, such as:
  • CRISC
  • CISM
  • CISA
  • CISSP
  • Or equivalent
• At least 4 years’ experience in a similar role with exposure to:
  • Banking operations
  • Technology
  • Assurance functions
• Practical knowledge of BOT guidelines on ICT Risk Management.
• Practical knowledge of risk and control frameworks and their application within the Financial Services industry.

JOB DIMENSIONS

Reporting Relationships

Jobs that report to this position directly and indirectly:

Direct Reports

• Not stated in the source.

Indirect Reports

• Not stated in the source.

STAKEHOLDER MANAGEMENT

Key stakeholders that the position holder will need to liaise/work with to be successful in this role include:

Internal Stakeholders

• Business Units
• Technology & Operations
• Enterprise Projects Team
• Internal Audit

External Stakeholders

• Vendors
• External Auditors

NCBA BANK CORE VALUE BEHAVIOURS

• Driving for Results: Intermediate
• Business Savy: Intermediate
• Selling the Vision: Intermediate
• Fostering Collaboration: Intermediate
• Responsiveness: Intermediate
• Coaching & Developing Others: Intermediate
• Building Trust: Intermediate
• Openness: Intermediate
• Building Organizational Talent: Intermediate
• Empowerment & Delegation: Intermediate