Information Risk & Business Resilience Manager

Stanbic Bank Kenya is a leading financial institution founded in 1958, offering banking and financial services in Kenya.

Information Risk & Business Resilience Manager

1. Type of Qualification: First Degree
2. Field of Study: Information Technology, Computer Science, Information Risk Management, Information Security, Business, Commerce, Law, Finance, Audit or related discipline.
3. Professional / Technical Certifications: At least one relevant certification is preferred (Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), ITIL, ISO 22301, ISO 27001, Certified Data Protection Officer or equivalent)
4. Experience Required: 7-8 years
5. Strong understanding of Non-Financial Risk as a second-line function and clear appreciation that business and technology remain accountable for first-line execution and control remediation.
6. Demonstrable experience in at least three of the following domains: Information Risk, Data Privacy, Business Resilience, Technology Risk, Cyber Risk, Operational Risk, IT Audit, Technology Governance or Business Continuity.
7. Ability to interpret Group standards and regulatory expectations and translate them into practical country implementation actions.
8. Strong governance writing capability: must be able to prepare committee-ready risk commentary, issue escalation notes and executive summaries.
9. Strong analytical capability and attention to detail, including comfort working with dashboards, risk registers, incident data, audit findings and action trackers.
10. Ability to influence senior stakeholders and provide constructive challenge without compromising relationship management.
11. High integrity, confidentiality, independence, professional scepticism and sound judgement when handling sensitive incidents, breaches, regulatory matters and risk acceptance decisions.
12. Working knowledge of risk systems and collaboration tools, including Risk Market Place or equivalent governance, risk and compliance platforms, Microsoft Excel, PowerPoint, Word and Teams.
13. Behavioural Competencies: Articulating Information, Developing Expertise, Documenting Facts, Examining Information, Following Procedures, Interacting with People, Managing Tasks
14. Technical Competencies: Evaluating Risk Management Effectiveness, Information Security, Information Security Management, Cyber and Technology Risk Oversight, Analytical Skills, Risk Response Strategy