About KCB Bank Kenya
Kenya Commercial Bank Limited operates as a non-trading holding company, officially commencing operations as a licensed banking entity on January 1, 2016. The holding company oversees KCB Kenya, which was established the same day, along with its regional branches in Uganda, Tanzania, Rwanda, Burundi, Ethiopia, and South Sudan. Additionally, it owns KCB Insurance Agency, KCB Capital, KCB Foundation, and other subsidiaries. The formation of this holding structure aims to enhance the Group’s access to unrestricted capital, expand investments beyond banking, provide strategic and operational independence to its subsidiaries, and strengthen governance and oversight mechanisms.
Senior Manager, Information Risk
- Job Type: full time
- Qualification: Bachelor’s Degree, Diploma
- Experience: 5 years
- Location: Kitale, Kenya
- Field: ICT
Job Responsibilities:
- Lead independent Information Risk and Technology-related risk advisory projects.
- Conduct assessments on Technology and Information risks, working with risk managers and analysts to create an annual Information Risk action plan for the Group.
- Oversee cybersecurity risk assessments, including reviews of IT general controls and application control risks.
- Ensure compliance with KCB Group’s policies, international security standards (ISO 27001, PCI DSS, NIST 800 series), and regulatory frameworks.
- Address emerging threats, including risk analysis for cloud computing, AI/ML security, and work closely with technology teams on mitigation strategies.
- Provide senior leadership and the board with updates on new risk trends.
- Conduct project assurance reviews and post-implementation evaluations for IT-related projects.
- Manage Red Team exercises and oversee the SWIFT attestation program.
- Monitor outstanding risks in DORCCO, GORCCO, and CAB meetings.
- Represent the Information Risk Department in CAB meetings.
- Follow up on PIR & KCSA review issues, ensuring timely resolution of action plans.
- Develop and implement an Information Risk awareness initiative across the KCB Group.
- Oversee and challenge various Information risks, including security, technology, and data quality risks.
Key Responsibilities:
- Develop and execute annual brand plans, evaluating both internal and external marketing initiatives to enhance brand visibility for enabling functions like Sustainability and Customer Excellence.
- Collaborate with department heads to align marketing efforts with business objectives while contributing to function-specific projects.
- Manage stakeholder relationships, ensuring effective engagement with business partners and branding service providers.
- Oversee budget planning, financial control, and expense tracking to ensure projects are delivered within budget and comply with policies.
- Establish and enforce brand guidelines and value propositions across the Group, ensuring consistency across all business units and customer touchpoints.
- Review internal communication materials and marketing collateral to maintain adherence to the company’s branding standards.
- Coordinate with internal teams, creative agencies, and external partners to track project progress, ensure alignment, and manage deliverables effectively.
Minimum Requirements:
Education:
- Bachelor’s Degree in Information Technology, Computer Science, Electrical Engineering, or Business (Required)
- Certifications in Information Security and Risk Management (CRISC, CISM, CISSP, CISA, or equivalent) (Required)
- Master’s Degree in IT, Computer Science, or MBA (Preferred)
Experience:
- At least 6 years in Information Risk, IT Security, or IT Audit (Required)
- Minimum of 5 years in Vulnerability Assessments (Required)
- At least 5 years in Red Team Exercises or Penetration Testing (Required)
- Minimum of 5 years managing stakeholder relationships (Required)
- At least 2 years in a leadership/people management role (Preferred)
- At least 6 years in the banking or financial sector (Required)
- At least 5 years in Project Management (Required)
Job Details:
- Contract Type: Fixed-term
- Compensation: Estimated at KES 400,000 per month, with actual earnings dependent on task completion. Payment is based on deliverables and workload, meaning earnings may vary based on performance.
- Language Requirement: English