IT Risk & Quality Assurance Specialist at CRDB Bank Tanzania (2 openings)
The IT Risk & Quality Assurance Specialist is responsible for identifying, assessing, monitoring, and reporting ICT risks across systems, applications, projects, and business processes. This role maintains the ICT risk register and collaborates with key stakeholders to implement and track risk treatment actions.
The officer evaluates the design and effectiveness of ICT controls, conducts third-party risk assessments, and ensures full alignment with regulatory, legal, and data privacy requirements. Furthermore, the role maintains ICT risk frameworks, policies, key risk indicators (KRIs), and executive reporting to support strong governance and operational efficiency across CRDB Bank.
- Organization: CRDB Bank Plc
- Position: IT Risk & Quality Assurance Specialist
- Number of Openings: 2
- Reporting Line: Senior Manager Technology Risk & Compliance
- Location: Head Office, Dar es Salaam, Tanzania
- Department: ICT Department
- Employment Terms: Permanent
- Application Deadline: 06 August 2026
Key Responsibilities
1. ICT Risk & Control Management
- Conduct comprehensive ICT risk assessments for systems, applications, projects, and business processes to identify control gaps and mitigation strategies.
- Lead and coordinate Risk and Control Self-Assessments (RCSAs), ensuring proper documentation, reporting, and escalation of emerging risks.
- Perform independent evaluations of ICT controls to test their design and operating effectiveness.
- Maintain and update the enterprise ICT Risk Register, tracking risk deficiencies, mitigation actions, and action owners.
2. Frameworks, Compliance & Governance
- Review and update ICT frameworks, policies, standards, guidelines, and process documents to maintain compliance with regulatory and organizational requirements.
- Monitor compliance with banking regulations, data privacy laws, and cyber security standards, escalating non-compliance issues promptly.
- Conduct third-party risk assessments and vendor due diligence to evaluate technology, operational, and data privacy risks.
- Collaborate with Risk, Compliance, Internal Audit, and external auditors to support assurance activities.
3. Monitoring, Reporting & Risk Advisory
- Develop, track, and report Key Risk Indicators (KRIs), risk events, and trends to senior management.
- Coordinate the identification, logging, and resolution of ICT-related risk incidents and control failures.
- Prepare clear ICT risk dashboards and executive reports to guide strategic decision-making.
- Provide expert risk advisory support for new technology initiatives, system implementations, and major process changes.
- Promote an organizational culture of ICT risk awareness and compliance through training and policy guidance.
Educational & Professional Qualifications
Required Education & Certifications
- Degree: Bachelor’s degree in Computer Science, Computer Information Systems, Management Information Systems, or a related field.
- Certifications: Must hold at least one recognized professional certification:
- CRISC, CISA, CGEIT, COBIT, ITIL, ISO 27001 (LA/LI), or PCI DSS.
Required Experience & Skills
- At least 2 years of professional experience in ICT risk management, technology governance, information security risk, or compliance within banking or a regulated financial environment.
- Hands-on experience conducting technology risk assessments and maintaining GRC tools/risk registers.
- Practical understanding of technology frameworks (COBIT, ISO 31000, ISO 27001, ITIL, NIST, PCI DSS).
- Proven capability in third-party vendor due diligence and regulatory compliance within the financial sector.
- Expertise in policy framework design, control mapping, and executive dashboard visualization.
Commitment to Diversity & Fraud Warning
Equal Opportunity & Sustainability
CRDB Bank is dedicated to upholding Sustainability and ESG practices. The Bank promotes an inclusive workplace and strongly encourages applications from qualified women and persons with disabilities.
Recruitment Fraud Disclaimer
CRDB Bank does not charge any fees at any stage of the recruitment process (application, interview, processing). Any request for payment should be treated as fraudulent and immediately disregarded.
Note: Only shortlisted candidates will be contacted.
How to Apply
Interested and qualified candidates should submit their application through the official CRDB Bank career site before the deadline.
Application Deadline: 06 August 2026
