Internal Controls Manager, Technology

Stanbic Bank Kenya is a leading financial institution in Kenya, part of the Standard Bank Group, Africa's largest bank by assets. It offers a wide range of banking and financial services to individuals, businesses, and corporations.

To strengthen the Bank’s technology and cybersecurity control environment by monitoring key controls, driving continuous controls testing, and providing risk insights through data analytics and automation. The role supports the First Line in identifying and addressing technology and cyber risks, whilst ensuring controls remain effective and emerging risks are detected and remediated promptly.

1. First Degree in Computer science, Information Technology, Data Science, Risk Management, Finance, Business Commerce or related field
2. Certifications such as CISM, CRISC, CISA or CISSP are highly desirable
3. 8-10 years of relevant experience in technology risk management, cybersecurity, or internal controls within the financial services / banking industry
4. Demonstrated experience in data analytics, automation, scripting (Python, SQL, R) and visualization tools (Power BI, Tableau) with the ability to develop scalable continuous monitoring solutions
5. Experience building and managing a Continuous auditing and Data Analytics program, including automating common analyses, creating visualizations and recurring audit check procedures
6. Experience extracting data from data warehouses and databases (example: SQL DB’s)
7. Proven track record of successfully leading and managing a team of professionals
8. In-depth knowledge of technology and cybersecurity frameworks, standards, and best practices (e.g. ISO, COBIT), IT governance and project management
9. Familiarity with relevant banking regulations and compliance requirements
10. Understanding of IT general controls and a deep understanding of technology risks
11. Possess relevant technology skills including data analytics or information systems auditing skills
12. Proficiency in use of data analytics tools with demonstrable scripting, visualization analytics skills
13. Strong analytical and problem-solving skills, with the ability to assess complex risk scenarios and propose effective solutions
14. Excellent communication and presentation abilities, both written and verbal, to convey complex technical concepts to non-technical stakeholders
15. Behavioural Competencies: Developing Expertise, Directing People, Documenting Facts, Embracing Change, Examining Information, Exploring Possibilities, Following Procedures, Providing Insights, Team Working
16. Technical Competencies: Evaluation of Internal Controls, Process Governance, Promote Good Governance, Risk & Control, Quality Control, Risk Identification & Management, Risk Response Strategy, Business Acumen