ICT Risk Analyst – Financial Institution

About the role

The ICT Risk Analyst will lead the bank’s information risk management programme, ensuring that technology assets are protected while supporting business growth. Reporting to the Manager ICT Risk, the role is based at the Head Office and involves close collaboration with compliance, security and operations teams.

Key responsibilities

• Identify, assess, measure and monitor IT risk through hands‑on risk assessments and risk registers.
• Communicate security and control deficiencies to business units and track remediation of controls for applications, technologies and assets.
• Maintain assessment criteria for applications and systems to ensure compliance with internal policies, standards and regulatory requirements.
• Support enterprise information security risk programmes by analysing emerging threats and recommending mitigation actions.
• Conduct periodic database security assessments, vulnerability scans and monitor database activities for suspicious behaviour.
• Assist with vendor risk assessments and analyse audit findings to implement corrective actions.

Required profile

• Minimum 2 years of professional experience in IT risk management within a financial institution.
• Bachelor’s degree in Computer Science, Information Systems or a related discipline.
• Professional certifications such as CISM, CRISC or CISA are an advantage.
• High level of integrity, confidentiality and strong communication skills.

Required skills

• Risk assessment
• Vulnerability scanning
• Database security monitoring