Senior Manager Technology Risk & Compliance Job at CRDB Bank Plc

CRDB Bank Plc is seeking an experienced technology risk and compliance professional to provide strategic leadership over the Bank’s technology governance, ICT risk management, controls assurance, audit coordination, regulatory compliance, and vulnerability management functions. The role is based in Dar es Salaam and requires a senior professional capable of working across ICT, Risk, Compliance, Cybersecurity, Internal Audit, regulators, and external auditors.

The successful candidate will be responsible for strengthening CRDB’s technology risk posture by ensuring ICT risks are identified, assessed, mitigated, monitored, and reported effectively. The position combines technology governance, cybersecurity risk, regulatory compliance, audit management, third-party risk, and executive-level reporting.

Key Responsibilities

• Provide strategic leadership and direction for Technology Risk & Compliance activities across the Bank.

• Develop and maintain an enterprise-wide Technology Risk Management framework.

  

• Establish and monitor technology risk governance structures, policies, procedures, standards, and controls.

• Ensure technology risk and compliance practices align with business strategy, regulations, and industry standards.

• Lead annual planning, budgeting, performance management, and objective setting for the function.

• Oversee ICT risk identification, assessment, monitoring, and reporting.

• Maintain the Technology Risk Register and lead Risk and Control Self-Assessments (RCSA).

• Monitor technology risk trends, Key Risk Indicators (KRIs), incidents, and emerging threats.

• Ensure risk mitigation plans are developed, implemented, and closed on time.

• Lead the Technology Controls Assurance Program and assess the effectiveness of technology controls.

• Oversee control reviews covering infrastructure, applications, cloud services, cybersecurity, data protection, and third-party technology services.

• Monitor remediation of control weaknesses and ensure identified issues are resolved.

• Coordinate ICT-related internal audits, external audits, regulatory examinations, and compliance reviews.

• Coordinate responses to audit findings, regulatory observations, and management action plans.

• Act as a key liaison with the Bank of Tanzania, Internal Audit, External Auditors, Risk Management, and Compliance teams.

• Provide governance oversight over vulnerability assessment, vulnerability remediation, and patch management.

• Ensure critical vulnerabilities and emerging cyber threats are escalated and appropriately managed.

• Ensure compliance with Bank of Tanzania regulations, data protection requirements, ISO 27001, PCI DSS, COBIT, ITIL, and internal policies.

• Prepare executive dashboards and reports covering technology risks, control effectiveness, audit status, regulatory compliance, vulnerability management, and KRIs.

• Present technology risk matters to ICT Management, Risk Committees, Executive Management, and Board Committees.

• Oversee third-party technology risk management and supplier risk monitoring.

• Drive continuous improvement of technology governance, controls, and compliance frameworks.

Qualifications and Experience Required

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Information Technology, or a related field.

• At least 8 years of experience in ICT Risk, Technology Governance, Cybersecurity, Audit, Compliance, or a related area.

• At least 4 years of managerial or leadership experience.

• Demonstrated experience leading teams and strategic technology risk initiatives.

• A Master’s degree in Technology, Risk Management, Cybersecurity, Business Administration, or a related field is an added advantage.

• Professional certification in one or more of COBIT, ITIL, CGEIT, CRISC, CISA, ISO 27001 LA/LI, or PCI DSS.

• Experience in banking, financial services, or another highly regulated environment.

• Strong experience in technology risk frameworks, governance, controls assurance, and compliance programs.

• Experience working with regulators, auditors, and executive management.

• Knowledge of COBIT, ISO 31000, ISO 27001, ITIL, NIST, and PCI DSS frameworks.

• Knowledge of third-party technology risk management and vendor due diligence.

• Understanding of banking-sector regulatory, cybersecurity, and data privacy requirements.

• Experience designing policies, mapping controls, and managing technology risk registers using GRC tools.

• Strong third-party risk assessment and supplier monitoring capabilities.

• Expertise in data visualization and executive technology risk dashboards.

• Strong audit, regulatory compliance, and stakeholder management skills.

How to Apply

Interested candidates should submit their application through the CRDB Bank careers portal.

The application deadline is 13 August 2026.

Final Thought

This is a senior technology governance and risk leadership position, rather than a purely technical cybersecurity role. The strongest candidates will combine substantial ICT risk or technology governance experience with banking-sector exposure, regulatory knowledge, audit and controls expertise, and proven managerial leadership. Candidates should ensure their CV clearly demonstrates experience with technology risk frameworks, GRC, regulatory compliance, audit coordination, cybersecurity risk, third-party risk, and executive reporting.