Job Title: Manager IT Risk (1)
Department: Risk Management
Reports To: Chief Risk Officer
Grade: HFB 6A
Direct Reports: None
Indirect Reports: None

Interacts/Interfaces with:
Internal
• IT
• Business Technology,
• Internal Audit,
• Heads of department
External
• External IT auditors
• IT system vendors

Job Purpose:
The Manager IT Risk will manage the delivery of Information Technology risk management framework. She/he will manage the process of independent I.T risk assessment and reporting.
She/ he will be responsible for resolving challenging issues and for managing multiple issues to completion. Typically someone in this position is responsible for a mixture of ongoing day-to-day Risk Management responsibilities, ad hoc requests and issues, and some long-term initiatives.

Key Result Areas
• Organize, review and conduct both scheduled and non-scheduled Information System risk assessments for new and existing systems, applications to identify vulnerabilities and to ensure compliance with HFB security policies, regulatory requirements and adherence to best practices. These systems may include: operating systems, database management systems, firewalls, intrusion detection systems, and web based applications.
• Review system access user rights and recommend changes to first line of defence.
• Design, monitor and communicate the results of the I.T Key Risk Indicators (KRIs) to identify and evaluate business technology risks and propose improvement of internal controls.
• Provide guidance over the general activities and concerns on HFB’s Technology functions including: governance, policy, control design and general operational effectiveness.
• Coordinate the submission of I.T and Business Technology Risk control self-assessments with respective risk champions.
• Work with risk owners to ensure tracking of I.T incidents/events and associated actions plans to closure. Identify key IT incidents which require control enhancements.
• Create IT risk awareness in the bank.
• Review and engage on Projects risk assessments.
• Manage the Audit trail review process. It seems incomplete
• Follow up on vulnerability testing process issues of the IT environment.
• Provide digital transformation advisory services
• Research and Maintain knowledge of industry best practices in regard to emerging I.T risks.
• Prepare Board, management / executive reporting.
Financial Responsibility: None

Person Specifications
Education & Training
• Bachelor of Science in Information Technology or Computer Science or equivalent experience required.
• Possesses one or more of the following certifications: Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), or other related certification is an added advantage.

Skills & Experience
• Minimum of eight (8) years’ experience in Information Technology systems, Information Technology Risk Management or Information Technology Audit i.e. governance or control function.
• Demonstration of domain knowledge of I.T infrastructure, application development / SDLC, information security and Disaster Recovery.
• Industry experience in financial services preferred Business Behaviours
• Ability to effectively manage multiple competing priorities
• This position requires strong organizational skills, resourcefulness, good judgment, persistence and follow through, and the ability to influence and “effectively challenge” others.
• Demonstration of ability to work in a collaborative environment and influence others
• Strong project management skillset.
• Detail oriented and strong communication skills.

Method of Application

Interested candidates should send a recent CV, copies of all academic transcripts, certificates and testimonials, daytime telephone contact, postal and email address and three competent referees not later than Friday, 17th September 2021 by 5:00pm to:
Chief Human Resources Officer
Housing Finance Bank,
Investment House
4 Wampewo Avenue, Kololo

Please take note that all applications should be sent by email to [email protected]. DO NOT HAND DELIVER YOUR APPLICATION.
ONLY shortlisted candidates will be contacted and any form of canvassing will lead to automatic disqualification.