Logo
Log in Join free
Jobs › Audit, Risk Mgt and Compliance › Officer, Digital Financial Services & Project Risks

Officer, Digital Financial Services & Project Risks

Sidian Bank Limited via Sidian Bank
This job expires today!
Salary
Not Disclosed
Location
Nairobi, Kenya
Type
Full Time
Deadline
23 Oct 2026
Closes today
Job Description
  • Oversee 2nd-line governance so digital banking, credit scoring and data processing meet CBK, statutory and ODPC requirements
  • Work with the Data Protection Officer so DFS data flows and Data Lake pipelines align with Kenya's Data Protection Act, 2019
  • Provide independent challenge on control design and operation across all DFS channels
  • Confirm each product has SOPs, workflows and dual-authorization controls signed off before launch
  • With ERM and the IT Risk Officer, assess technical vulnerabilities, change requests, API security and privileged access management
  • Review risk profiles and controls for new features, lending engines, third-party integrations and Data Lake ingestion before go-live
  • Review technical design documents such as architecture and data flow diagrams to identify risks and test control design
  • Track remediation of control gaps, vulnerability findings and red-team results to closure
  • Oversee BCP and DR readiness for critical channels including mobile, internet banking, USSD, merchant, digital lending and Data Lake feeds
  • Take part in failover tests and assess recovery time and recovery point objectives
  • Verify that failback, offline queues and manual reconciliation keep accounting controls and data integrity intact during outages
  • Monitor loan scoring parameters, approval thresholds, disbursement limits and write-off reconciliations, including AI controls in DFS products
  • Review merchant transaction limits, float reconciliations, fee splits, chargebacks, settlements and interchange collection
  • Develop and monitor DFS control metrics, project risk indicators and KRIs, and help set breach thresholds
  • Ensure DFS and project risks are captured and tracked in the business RCSA
  • Run independent control tests to assess design adequacy and operating effectiveness
  • Test monitoring systems, rule exceptions and override queues to confirm fraud and operational failures are detected and fixed by 1st-line teams
  • Support investigations and root-cause analysis of transaction failures, payment outages and privacy breaches with the Data Protection Officer
  • Track remediation plans to ensure 1st-line teams fix underlying system flaws
  • Maintain KRI and CSA reporting for DFS, digital lending, merchant acquiring and Data Lake operations and projects
  • Prepare 2nd-line risk and control dashboards for IT Risk, BCP and Data Privacy for senior management and Board risk reports
Requirements
  • Bachelor's degree in IT, computer science, business or a related field
  • Strong knowledge of frameworks and regulations such as ISO 27001 and NIST 800-53, or certifications such as CompTIA Security+, CEH or CISA
  • At least 5 years of banking or IT experience, including exposure to DFS and projects
  • Knowledge of IT operations, IT controls, IT risk, IT audit and project management
  • Knowledge of data protection laws including GDPR, Kenya's Data Protection Act 2019 and CBK guidelines
  • Professional certification: CISA, CISM or CISSP
  • Interpersonal and communication skills
  • Teamwork
  • Analytical and problem-solving skills
  • Knowledge of security tools
  • Report writing skills
Done for you
We'll apply to this for you

Denidel's HR team submits and tracks the application on your behalf.

Log in to apply Create free account

Opens the employer's own site, where you complete your application

Similar
Regulatory Compliance Analyst Internal Control and Compliance Officer Internal IT Auditor
Posted14 Oct 2026
Views0
Apply now