Equity Bank Limited (The “Bank”) is incorporated, registered under the Kenyan Companies Act Cap 486 and domiciled in Kenya. The address of the Bank’s registered office is 9th Floor, Equity Centre, P.O. Box 75104 – 00200 Nairobi. The Bank is licensed under the Kenya Banking Act (Chapter 488), and continues to offer retail banking, microfinance and related services. The Bank has subsidiaries in Kenya, Uganda, South Sudan, Rwanda and Tanzania. Its shares are listed on the Nairobi Securities Exchange and Uganda Securities Exchange. Equity Bank was founded as Equity Building Society (EBS) in October 1984 and was originally a provider of mortgage financing for the majority of customers who fell into the low income population. The society’s logo, a modest house with a brown roof, resonates with its target market and their determination to make small but steady gains toward a better life, seeking security and advancement of their dreams. The vast majority of Africans have historically been excluded from access to financial resources.
Job Purpose
The Digital Standards & Policies Lead will oversee the development and maintenance of a robust control environment for the Bank’s technology investments. They will lead teams focused on the development and implementation of policies, processes, procedures, and guidelines for the effective and safe utilization of technology in the Bank. They should be well versed in leading technology standards, policies, and management of technology risks.
Job Responsibilities/ Accountabilities:
Directly Support in the implementation process for adopted technology, security and operational standards and frameworks e.g. ISO 20000, 27001, 22301, PCI DSS, SWIFT Customer Security Controls (CSCF) among others Maintenance of the Bank’s adopted standards by ensuring successful surveillance reviews, attestations and recertification audits Ensuring day to day implementation of adopted standards requirements, processes and controls Lead the Bank’s implementation teams for adopted standards and frameworks; interface with third parties and handle the logistical planning for assessment procedures Translating adopted technology, security and operational and standards into Bank policies, processes and procedures (technology and operations) Ensure compliance and conformance to technology and operational policies, processes and SOPs; measure and report on compliance and conformance to the policies, processes and SOPs Support the IT and operations units to develop new and improve on existing processes and SOPs in line with technology policies and adopted standards Develop and maintain the annual schedule for compliance reviews and assessment for adopted standards and perform the logistical planning Recommend and prescribe applicable technology and operations standards or frameworks that can be adopted by the Bank in order to improve IT service delivery, security and efficiency Provide timely progress reports for assigned tasks/projects and also support the monthly, quarterly and annual management and Board level reporting Manage immediate reports to ensure unit objectives and KPIs are met in a timely manner.
Qualifications
Key Critical Competencies:
A high degree of professionalism and personal integrity Excellent management skills Excellent analytical and reporting skills Demonstrated ability to work in an agile workplace and effectively balance multiple responsibilities Be a team leader and integrator Ability to work with a high degree of independence Strong knowledge and understanding of IT governance frameworks like COBIT and ITIL Understanding of key standards & frameworks such as ISO 20000, ISO 27001 and/or ISO 22301 Good working knowledge of PCI DSS, SWIFT CSCF standards and compliance requirements
Academic Qualifications and Competencies:
At least 3 years of experience in Information Technology in the field of IT Governance, IT Risk Management, Information Security and/or IT Service Management with a minimum of 1 year in a management role A university degree in Computer Science, Information Technology, and/or related field Recognized certification in information systems management and/or security e.g. CISA, CISM, CGEIT, CRISC, ITIL, etc. Certified as ISO Lead Implementer or Lead Auditor for ISO 20000, ISO 27001 and/or ISO 22301 Preferred – COBIT 5 or COBIT 2019 certified (Foundation, Implementation or Assessor levels) Preferred – Experience in working in a banking environment will be an added advantage
