Manager, ICT Risk

NCBA Tanzania is seeking a qualified and experienced Manager, ICT Risk to strengthen its information and technology risk management function in Dar es Salaam. The role focuses on identifying ICT, information security, cybersecurity, and business-continuity risks while evaluating whether existing technical and procedural controls are effective.

The successful candidate will provide practical recommendations to management, support regulatory and internal risk assessments, review ICT and cybersecurity policies, and help strengthen the bank’s overall IT risk management framework. This position is suitable for professionals with at least four years of relevant experience in ICT risk, banking operations, technology, or assurance functions.

About the Role

The Manager, ICT Risk will assess the bank’s technology environment and identify risks that could affect information security, business continuity, systems, and operations. The role requires the ability to translate complex technology and risk issues into clear reports and dashboards that management can use for decision-making.

The position will also contribute to the development of ICT risk frameworks and methodologies, monitor remediation of identified gaps, and support information-security awareness and training initiatives.

Responsibilities

• Conduct ICT risk assessments and evaluate the effectiveness of technical and procedural controls.

• Provide practical and actionable recommendations to management.

  

• Assess the bank’s information and cybersecurity capabilities, operations, and supporting technology controls.

• Identify technology and cybersecurity risks and recommend appropriate mitigation measures.

  

• Identify business-disruption risks associated with current business practices and strategic plans.

• Assess the potential impact of identified business-disruption risks.

  

• Review ICT disaster-recovery plans and identify critical points of failure.

• Recommend measures to strengthen disaster-recovery capabilities based on recognized best practices.

• Review and report on residual ICT risks.

• Review and improve information and cybersecurity training and awareness programmes.

• Identify and communicate emerging ICT and cybersecurity threats in line with the bank’s existing risk profile.

• Translate complex risk, process, and control relationships into clear dashboards and management reports.

• Provide effective risk-management oversight during internal assessments and regulatory examinations.

• Support the development and improvement of the IT risk-management practice.

• Contribute to the development of ICT risk frameworks and methodologies.

• Review identified gaps from ICT risk assessments and follow up on their closure.

• Periodically review ICT and cybersecurity policies, standards, and guidelines.

• Support timely ICT risk assessments to improve business operations and customer satisfaction.

• Provide prompt responses to internal customer queries relating to ICT risks.

• Deliver assigned performance objectives.

• Manage personal learning and professional development.

• Participate in coaching and training opportunities to strengthen professional capacity.

• Build effective relationships with internal stakeholders.

• Promote a strong risk-management culture across the organization.

Qualifications and Requirements

Applicants should have:

• University degree in a relevant field.

• Master’s degree is an added advantage.

• Relevant professional certification in information security or risk management, such as CRISC, CISM, CISA, CISSP, or an equivalent qualification.

• At least 4 years of experience in a similar ICT risk role.

• Experience or exposure to banking operations, technology, or assurance functions.

• Practical knowledge of Bank of Tanzania (BoT) guidelines on ICT Risk Management.

• Practical knowledge of risk and control frameworks.

• Understanding of how risk and control frameworks are applied within the financial services industry.

• Strong risk assessment and analytical skills.

• Ability to identify technology and cybersecurity risks.

• Ability to recommend practical risk mitigation measures.

• Strong reporting and communication skills.

• Ability to simplify complex ICT risk matters for management.

• Results-driven approach.

• Strong business acumen.

• Ability to communicate and promote strategic risk-management objectives.

• Strong collaboration skills.

• Responsiveness and ability to provide timely support.

• Coaching and people-development skills.

• Ability to build trust with stakeholders.

• Openness and adaptability.

• Organizational talent-development skills.

• Empowerment and delegation capabilities.

How to Apply

Interested and qualified candidates should submit their applications online through the NCBA Tanzania careers platform.

Apply Online – NCBA Tanzania Manager, ICT Risk

Applicants should ensure their CV clearly demonstrates experience in ICT risk management, cybersecurity, information security, technology controls, risk frameworks, banking operations, and regulatory compliance.

Application Deadline

The application deadline is 1 September 2026.

Qualified candidates should complete their applications before the deadline.

Final Thought

The Manager, ICT Risk position is a strong opportunity for an ICT risk, cybersecurity, information security, or technology assurance professional seeking a managerial role within the banking sector. Candidates with relevant certifications, practical knowledge of BoT ICT Risk Management guidelines, and experience applying risk and control frameworks in financial services should consider applying.