Job particulars
- Job title
- ICT Risk Officer, Risk & Compliance
- Hiring organisation
- s Expand Recruitment Services
- Location
- Nairobi, Kenya
- Employment type
- Full-time
- Work arrangement
- On-site
- Industry
- IT
- Level
- Middle
- Posted
- 27 Oct 2026
- Closing date
- 6 Nov 2026
Key responsibilities
- ICT Risk Management.
- Develop and maintain the ICT risk management framework.
- Conduct ICT risk assessments across systems, projects, infrastructure, and third-party service providers.
- Maintain the ICT Risk Register and monitor risk treatment plans.
- Assess emerging technology risks, including cloud, digital transformation, AI, and cyber risks.
- Risk Monitoring and Reporting.
- Monitor Key Risk Indicators (KRIs) relating to ICT.
- Prepare monthly, quarterly, and annual ICT risk reports.
- Escalate significant technology risks to management and relevant committees.
- Track and report risk mitigation actions.
- Security Operations.
- Monitor the organization’s security posture and controls.
- Investigate and manage information security incidents.
- Review vulnerability assessments and remediation activities.
- Monitor security tools such as SIEM, EDR, DLP, firewalls, and endpoint security solutions.
- Governance and Compliance.
- Ensure compliance with regulatory requirements relating to technology risk.
- Support risk reviews for new systems and projects.
- Participate in business continuity and disaster recovery assessments.
- Support internal and external audits relating to ICT risk.
- Third-Party Risk Management.
- Assess technology risks associated with vendors and service providers.
- Review ICT-related contractual and control requirements.
- Monitor outsourced technology services for emerging risks.
- Risk Awareness
- Promote risk awareness across ICT and business functions.
- Provide guidance on risk assessments and control effectiveness.
- Key Performance Indicators (KPIs)
- Percentage of ICT risks assessed and reviewed.
- Closure rate of ICT risk mitigation actions.
Candidate requirements
- Bachelor’s Degree in Information Technology, Computer Science, Information Systems, Risk Management, or related field.
- Professional certification such as:.
- CRISC
- CISA
- CGEIT
- ISO 31000 Risk Management.
- CISSP
- Over 3 years’ experience in ICT Risk, Technology Audit, IT Governance, or Enterprise Risk Management.
- Experience in regulated industries is desirable.
Required skills
Stakeholder managementRisk assessment and analysisGovernance and regulatory complianceTechnology risk managementReport writing and communication
Ready to apply?
Start ApplicationCandidate safety
Never pay an employer or recruiter for a job offer. Review the application instructions after signing in and report suspicious vacancies to Kebarick.
Hiring organisation
s Expand Recruitment Services