Manager IT Risk

Job Details

• Department: Risk Management
• Reports To: Chief Risk Officer
• Job Grade: HFB 7 C
• Direct Reports: IT Risk Officer (direct); none indirect
• Interacts with: Internally with Business Technology, Information Security, Internal Audit and Heads of Department; externally with external IT auditors and IT system vendors.
• Financial Responsibility: N/A

Job Purpose: The Manager IT Risk will oversee the implementation of the Bank's information technology risk management framework and manage the process of independent IT risk assessment and reporting. The role involves a mixture of ongoing day-to-day risk management responsibilities, ad hoc requests and issues, and long-term initiatives.

Key Duties and Responsibilities

• Organize, review and conduct both scheduled and unscheduled information systems risk assessments for new and existing systems and applications to identify vulnerabilities and ensure compliance with HFB security policies, regulatory requirements and best practices (including operating systems, database management systems, firewalls, intrusion detection systems and web-based applications).
• Review system access rights and recommend changes to the first line of defense.
• Design, monitor and communicate IT Key Risk Indicators (KRIs) to identify and evaluate business technology risks and propose improvements to internal controls.
• Provide guidance over general activities and concerns on the Bank's technology functions including governance, policy, control design and general operational effectiveness.
• Coordinate the submission of technology teams' risk and control self-assessments with respective risk champions.
• Work with risk owners to ensure tracking of IT incidents/events and associated action plans to closure, and identify key IT incidents requiring control enhancements.
• Create IT risk awareness across the Bank.
• Review and participate in project risk assessments.
• Manage the audit-trail review process.
• Follow up on vulnerability-testing findings in the IT environment.
• Provide digital transformation advisory services.
• Research and maintain knowledge of industry best practices regarding emerging IT risks.
• Prepare reports for the Board, management and executive committees.

Qualifications, Skills and Requirements

Education & Training

• A Bachelor of Science in Information Technology or Computer Science, or equivalent experience, is required.
• One or more of the following certifications is an added advantage: Certified Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA) or other related certifications.

Skills & Experience

• A minimum of eight (8) years' experience in Information Technology systems, IT Risk Management or IT Audit (governance or control function).
• Domain knowledge of IT infrastructure, application development/SDLC, information security and disaster recovery.

Business Behaviours

• Ability to effectively manage multiple competing priorities.
• Strong organizational skills, resourcefulness, good judgment, persistence and follow through, with the ability to influence and effectively challenge others.
• Ability to work in a collaborative environment and influence others.
• Strong project management skill set.
• Detail oriented, with strong communication skills.
• Industry experience in financial services is preferred.

How to Apply

Interested candidates should submit their applications with a recent CV, copies of all academic transcripts, certificates and testimonials, daytime telephone contact, postal and email address and three competent referees not later than Friday 14th August 2026 by 5:00pm, addressed to the Chief Human Resources Officer, Housing Finance Bank, Investment House, 4 Wampewo Avenue, Kololo. All applications must be sent via the link https://bit.ly/HFB_JobVacancies — DO NOT HAND DELIVER YOUR APPLICATION.

Guidelines for submitting documents:

1. Scan and submit all documents in one single batch in this order: application letter, curriculum vitae (CV), academic documents and certificates.
2. Maximum document size is 10 MB.
3. Indicate the position you are applying for in the subject line.

Only shortlisted candidates will be contacted, and any form of canvassing will lead to automatic disqualification.