IT Risk Analyst – Risk Department

About the role

The IT Risk Analyst will support KCB Group’s Risk Department in Kampala by identifying, assessing and mitigating cyber and system risks across the bank’s technology landscape.

Key responsibilities

• Conduct proactive system reviews, data analysis and vulnerability assessments to identify and remediate risks.
• Perform risk assessments before, during and after implementation of strategic initiatives and IT projects.
• Monitor market and industry cyber risk trends and produce monthly risk reports for senior management.
• Track usage of risk tools (RCSAs, risk registers, KRIs) and submit assurance reviews to the Risk Management Department.
• Manage the incident management process, ensuring compliance across all units for cyber/technology incidents.
• Participate in business continuity planning and compliance monitoring of bank policies.
• Review information systems audit reports and follow up on recommendations.
• Provide risk training and awareness to staff and maintain stakeholder relationships.

Required profile

• Bachelor’s degree in IT, Computer Science, Information Security or related field.
• Minimum 3 years experience in information risk, IT security or IT audit.
• Experience in vulnerability assessments, red‑team exercises and penetration testing.
• Proven stakeholder management and report‑writing skills.
• Professional certifications such as CRISC, CISM, CISSP or CISA are an advantage.

Required skills

• Information risk assessment
• IT security and audit
• Vulnerability assessment
• Red‑team exercises
• Penetration testing
• Incident management processes
• Business continuity planning