MANAGER CYBER SECURITY

Location

Tanzania Head Office

Department

CYBERSECURITY UNIT

Number of openings

1

Job Purpose

Responsible for protection of system boundaries, keeping computer systems and network devices hardened against attacks and securing highly sensitive data. This includes designing and managing systems security architecture and developing cyber security designs as per the established security requirements. Ensuring security minimum requirements and best practices are applied consistently across existing and new systems.

Principle Responsibilities

• To implement and enforce Cybersecurity Policies to ensure alignment with related corporate policies.
• To understand and provide expert advice on the Cybersecurity risks facing information assets.
• Responsible for the technical Cybersecurity strategy – proposing and implementing solutions and processes to continuously reduce the risks and effects of hacking and cybercrime.
• Responsible for forensic investigation of Cybersecurity incidents/breaches, providing regular reporting using the appropriate assurance framework.
• To coordinate regular security testing with high-quality reporting. Responsible for the subsequent hardening of IT systems based on results of regular tests.
• Implement technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• To administrate and monitor the infrastructure using specific Cybersecurity applications including (but not limited to) the company-wide antivirus, email encryption, Data Loss Prevention, file screening, server audit, and host protection systems. This requires continuous reassessment of suitability for purpose and making or recommending any required changes.
• Run various assessment tools to obtain insight on security posture and create various reports for management and stakeholders.
• Provide remediation consultation to global teams to support enterprise risk reduction efforts.
• Monitoring of all IT assets on configuration integrity in order to proactively manage the bank’s environment.
• Engineer, implement and monitor security measures for the protection of computer systems, networks, and information assets.
• Identify and define system security requirements standards of the bank.
• To be responsible for regular security testing with high-quality reporting. Responsible for the subsequent hardening of IT systems based on results of regular tests.
• Hardening of all IT assets before promotion to the production environment. A formal checklist will
  

  be used for installation/changes of any configuration in the bank’s environment for a new/existing setup.

• Help enhance and maintain current hardening standards for all information assets. This includes but is not limited to servers, workstations, databases, audio-visuals, and network devices.
• Support penetration testing activities and exercises, including self-capacity to perform penetration testing.
• Recommend assessment-based findings, outcomes, and propositions for further system security hardening enhancement.
• Review configuration APIs and PKIs of the bank to ensure compliance with the established standard on a regular basis.
• Responsible for the information security awareness and training program that informs and motivates workers on cybersecurity matters as per the SAT program.
• Monitor internal and external policy compliance and ensure the cybersecurity framework is being complied with by both vendors and employees.
• Implement new technology on the network security and ensure security hardening and effectiveness of the control. Implement and ensure compliance of the Cybersecurity framework across the organization.
• Participate in the incident response program, ensuring that the program is tested throughout the organization and that every staff member knows their duties during such an incident.
• Prepare and report all security incidents to Management or as directed by the line manager.
• Real-time monitoring of network and systems user activities.
• Work with different units in the department to reduce systems configuration risk.
• The CRDB Bank Management may assign other responsibilities as needed.

Qualifications Required

• Bachelor’s degree in computer science, Cyber Security, Software engineering or related academic field.
• At least one security professional certifications such as CISA, CISSP, CEH, CISM are a plus.
• At least 3 years of general ICT security experience in banking environment.
• Expert knowledge of current IT cybersecurity issues.
• Management of a complex IT infrastructure within large enterprise-level organization.
• Contingency and disaster recovery planning.
• Up-to-date knowledge of technical applications.
• Ability to think ahead and anticipate problems, issues, and solutions.
• Experience providing IT-focused enterprise architecture and strategy.
• Windows operating systems and Active Directory management.
• Anti-virus domain infrastructure.
• Experience of working in a deadline-oriented incident management environment managing multiple issues simultaneously.

CRDB Commitment

CRDB Bank is dedicated to upholding Sustainability and ESG practices and encourage applicants who share this commitment. The Bank also promotes an inclusive workplace, hence applications from women and individual with disabilities are encouraged.

It is important to note that CRDB Bank does not charge any fees for the application or recruitment process, and any requests for payment should be disregarded as they do not represent the bank’s practices.

Only Shortlisted Candidates will be Contacted.

Deadline

2025-10-12

Employment Terms

CONTRACT

Contract Duration

1 YEARS

To apply for this job please visit careers.crdbbank.co.tz.