From the employer's careers page · Verified employer
Officer, Digital Financial Services & Project Risks
Sidian Bank
Job at a glance
- Employer
- Sidian Bank
- Position
- Officer, Digital Financial Services & Project Risks
- Location
- Kenya
- Experience
- 5+ years in Banking or IT with DFS exposure
- Education
- Bachelor’s degree in IT, CS, Business or related field
- Salary
- Not stated in the advert
- Application deadline
- Open until filled (listed until 30 October 2026)
- Posted on VacancyKE
- 12 October 2026
VacancyKE summary
Sidian Bank is hiring an Officer, Digital Financial Services & Project Risks to provide independent second-line assurance on digital banking controls and project risks. You will oversee compliance with CBK guidelines, manage IT risk assessments, and ensure operational resilience across DFS channels.
What stands out about this opportunity
- Focus on Digital Financial Services (DFS) and Project Risks
- Requires professional certification (CISA/CISM/CISSP)
- Involves collaboration with Data Privacy Officer
Key responsibilities
- Provide 2nd Line governance oversight on digital banking operations and data processing architectures.
- Collaborate with the Data Privacy Officer to align DFS data flows with Kenya DPA 2019 requirements.
- Coordinate with ERM and IT Risk Officer to evaluate technical vulnerabilities and API security controls.
- Review risk profiles for new feature deployments and third-party integrations before production go-live.
- Oversee Business Continuity Planning (BCP) and Disaster Recovery readiness for critical digital channels.
- Monitor Digital Lending controls, including loan scoring parameters and automated approval thresholds.
- Review Merchant Acquiring controls, such as transaction limits, fee splits, and chargeback handling.
- Support investigation of digital transaction failures and track incident remediation action plans.
Who should apply?
This role suits experienced IT or banking professionals with strong knowledge of digital financial services, regulatory compliance, and information security frameworks who are seeking a second-line assurance position.
Key requirements
- 5+ years Banking/IT experience
- Bachelor's degree in IT/CS/Business
- CISA, CISM or CISSP certification
- Knowledge of CBK & ODPC guidelines
- ISO 27001/NIST framework expertise
Nice to have
- Industry certifications like CompTIA Security+ or CEH.
How to apply
- Complete the Application Form specifying 'Officer, Digital Financial Services & Project Risks'.
- Refer to the full job description PDF provided in the advert link.
Official source: From the employer's careers page · sidianbank.co.ke. VacancyKE never charges job seekers.
Original employer advertisement
Published by Sidian Bank on sidianbank.co.ke. Shown for reference; the employer’s version is the official one.
The employer’s advert
Officer, Digital Financial Services & Project Risks
JOB PURPOSE
The job holder will assist in providing continuous, independent 2 nd line assurance on the Bank’s Digital Financial Services (DFS) Control and project risks undertaken by the bank. The role delivers objective oversight on control design and operating effectiveness across Digital Financial Services channels, Digital Lending platforms, Merchant Acquiring, and Data Lake pipelines & Projects. The role holder will also ensure that all Digital Financial Services, operational and systems risks across Bank platforms are managed in strict compliance with internal policies, CBK & ODPC guidelines.
KEY RESPONSIBILITIES:
• Governance and Regulatory Compliance
• IT Risk and Data Impact Assessment
• Business Continuity and Disaster Recovery Coordination
• Systems Monitoring and Control Review
• Incident and Breach Management
• Reporting
GOVERNANCE AND REGULATORY COMPLIANCE
• Maintain 2nd Line governance oversight ensuring all digital banking operations, credit scoring algorithms, and data processing architectures comply with CBK guidelines, statutory limits, and ODPC regulatory requirements.
• Collaborate with the Data Privacy Officer to ensure DFS data flows, processing activities, and Data Lake ingestion pipelines align with statutory requirements under the Kenya DPA 2019 & regulations.
• Provide objective 2nd Line oversight and challenge on the design and operational effectiveness of control systems and workflows across all DFS channels.
• Validate that all approved products are supported by end-to-end standard operating procedures (SOPs), workflow routines, and dual-authorization control frameworks signed off by all relevant stakeholders prior to launch.
IT RISK AND DATA IMPACT ASSESSMENT
• Coordinate directly with the ERM, IT Risk Officer to evaluate technical vulnerabilities, system change management requests, API security controls, and Privileged Access Management (PAM) across the bank’s DFS systems and projects.
• Review risk profiles and control baselines for new feature deployments, digital lending engines, third-party integrations, and Data Lake ingestion controls prior to production go-live.
• Review technical documentation for products involving DFS products and projects (i.e. solution architecture, process and data flow diagrams) for comprehensive risk identification an controls design effectiveness reviews.
• Track the remediation of technical control gaps, vulnerability assessment items, and any red-teaming test findings to final closure on DFS and Projects.
BUSINESS CONTINUITY AND DISASTER RECOVERY COORDINATION
• Oversee BCP and Disaster Recovery (DR) readiness for critical digital channels (Mobile Banking, Internet Banking, USSD, Merchant, Digital Lending engines, and Data Lake feeds).
• Participate in periodic BCP/DR failover tests, assessing operational resilience, recovery time objectives (RTO), and recovery point objectives (RPO) during simulated switchover events for DFS projects.
• Validate that failback routines, offline processing queues, and manual reconciliation procedures during system outages maintain strict accounting controls and data integrity.
SYSTEMS MONITORING AND CONTROL REVIEW
• Digital Lending Controls – Monitor loan scoring parameters, automated approval thresholds, disbursement limits, and write-off reconciliation routines including review of controls around use of AI in DFS products.
• Merchant Acquiring Controls – Review merchant transaction limits, merchant float reconciliations, fee splits, and chargeback handling; review merchant settlement controls, chargeback/reversal workflows, transaction limits, and interchange fee collection routines across merchant acquiring deployment & other controls e.g. on automated credit scoring parameters, AI controls in DFS deployments.
• Develop and monitor DFS control metrics, project risk indicators, and operational KRI’s, and assist in the development of breach thresholds.
• Ensure all DFS and project risks are comprehensively captured and tracked through the business RCSA.
• Perform independent control tests and validate both design adequacy and operational effectiveness of controls.
INCIDENT AND BREACH MANAGEMENT
• Review and evaluate the effectiveness of automated monitoring systems with independent sample testing of the implemented DFS controls/rule exceptions and override queues to ensure digital fraud and operational failures are promptly detected and remediated by 1st Line teams.
• Support the investigation, logging, and root-cause analysis of digital transaction failures, payment outages, and privacy breaches in coordination with the Data Protection & Privacy Officer.
• Track incident remediation action plans, ensuring 1st Line operational teams resolve underlying system flaws to prevent recurring outages or losses.
REPORTING
• Formulate and maintain and report on Key Risk Indicators (KRIs) on CSA) for DFS solutions, Digital Lending, Merchant Acquiring, and Data Lake operations & Projects
• Prepare comprehensive 2nd Line risk and control performance dashboards for IT Risk, BCP & Data Privacy for Senior Management & Board Risk Reports on DFS and projects.
ACADEMIC BACKGROUND
• Bachelor’s degree in Information Technology, Computer science, business, or related fields.
• Strong knowledge of Information Security related frameworks/ Regulations/such as, ISO 27001, NIST 800-53 or other leading industry certifications e.g. CompTIA Security +, CEH, CISA.
• At least 5 years of Banking or Information Technology Experience with exposure to Digital Financial Services (DFS) & Projects.
• Knowledgeable in IT operations, IT Controls, IT Risk, IT Audit & Project Management.
• Knowledge on Data Protection laws & General Data Protection Regulations (GDPR)/Kenya Data Protection Act, 2019 & Regulations, CBK guidelines.
SKILLS & COMPETENCIES
• Excellent interpersonal & Communication Skills
• Working in Teams
• Excellent analytical skills
• Problem solving skills
• Excellent knowledge of security tools
• Report writing skills
PROFESSIONAL CERTIFICATION
• Professional qualifications such as Certified Information Systems Security Professional CISA, Certified Information Systems Security Professional CISM or Certified Information Systems Security Professional (CISSP).
Application Form
Position Applying For: Officer, Digital Financial Services & Project Risks
Full job description (PDF): https://sidianbank.co.ke/wp-content/uploads/2023/06/Sidian-Bank-Recruitment-Privacy-Notice-June-2023.pdf?pid=explorer&efh=false&a=v&chrome=false&embedded=true
JOB PURPOSE
The job holder will assist in providing continuous, independent 2 nd line assurance on the Bank’s Digital Financial Services (DFS) Control and project risks undertaken by the bank. The role delivers objective oversight on control design and operating effectiveness across Digital Financial Services channels, Digital Lending platforms, Merchant Acquiring, and Data Lake pipelines & Projects. The role holder will also ensure that all Digital Financial Services, operational and systems risks across Bank platforms are managed in strict compliance with internal policies, CBK & ODPC guidelines.
KEY RESPONSIBILITIES:
• Governance and Regulatory Compliance
• IT Risk and Data Impact Assessment
• Business Continuity and Disaster Recovery Coordination
• Systems Monitoring and Control Review
• Incident and Breach Management
• Reporting
GOVERNANCE AND REGULATORY COMPLIANCE
• Maintain 2nd Line governance oversight ensuring all digital banking operations, credit scoring algorithms, and data processing architectures comply with CBK guidelines, statutory limits, and ODPC regulatory requirements.
• Collaborate with the Data Privacy Officer to ensure DFS data flows, processing activities, and Data Lake ingestion pipelines align with statutory requirements under the Kenya DPA 2019 & regulations.
• Provide objective 2nd Line oversight and challenge on the design and operational effectiveness of control systems and workflows across all DFS channels.
• Validate that all approved products are supported by end-to-end standard operating procedures (SOPs), workflow routines, and dual-authorization control frameworks signed off by all relevant stakeholders prior to launch.
IT RISK AND DATA IMPACT ASSESSMENT
• Coordinate directly with the ERM, IT Risk Officer to evaluate technical vulnerabilities, system change management requests, API security controls, and Privileged Access Management (PAM) across the bank’s DFS systems and projects.
• Review risk profiles and control baselines for new feature deployments, digital lending engines, third-party integrations, and Data Lake ingestion controls prior to production go-live.
• Review technical documentation for products involving DFS products and projects (i.e. solution architecture, process and data flow diagrams) for comprehensive risk identification an controls design effectiveness reviews.
• Track the remediation of technical control gaps, vulnerability assessment items, and any red-teaming test findings to final closure on DFS and Projects.
BUSINESS CONTINUITY AND DISASTER RECOVERY COORDINATION
• Oversee BCP and Disaster Recovery (DR) readiness for critical digital channels (Mobile Banking, Internet Banking, USSD, Merchant, Digital Lending engines, and Data Lake feeds).
• Participate in periodic BCP/DR failover tests, assessing operational resilience, recovery time objectives (RTO), and recovery point objectives (RPO) during simulated switchover events for DFS projects.
• Validate that failback routines, offline processing queues, and manual reconciliation procedures during system outages maintain strict accounting controls and data integrity.
SYSTEMS MONITORING AND CONTROL REVIEW
• Digital Lending Controls – Monitor loan scoring parameters, automated approval thresholds, disbursement limits, and write-off reconciliation routines including review of controls around use of AI in DFS products.
• Merchant Acquiring Controls – Review merchant transaction limits, merchant float reconciliations, fee splits, and chargeback handling; review merchant settlement controls, chargeback/reversal workflows, transaction limits, and interchange fee collection routines across merchant acquiring deployment & other controls e.g. on automated credit scoring parameters, AI controls in DFS deployments.
• Develop and monitor DFS control metrics, project risk indicators, and operational KRI’s, and assist in the development of breach thresholds.
• Ensure all DFS and project risks are comprehensively captured and tracked through the business RCSA.
• Perform independent control tests and validate both design adequacy and operational effectiveness of controls.
INCIDENT AND BREACH MANAGEMENT
• Review and evaluate the effectiveness of automated monitoring systems with independent sample testing of the implemented DFS controls/rule exceptions and override queues to ensure digital fraud and operational failures are promptly detected and remediated by 1st Line teams.
• Support the investigation, logging, and root-cause analysis of digital transaction failures, payment outages, and privacy breaches in coordination with the Data Protection & Privacy Officer.
• Track incident remediation action plans, ensuring 1st Line operational teams resolve underlying system flaws to prevent recurring outages or losses.
REPORTING
• Formulate and maintain and report on Key Risk Indicators (KRIs) on CSA) for DFS solutions, Digital Lending, Merchant Acquiring, and Data Lake operations & Projects
• Prepare comprehensive 2nd Line risk and control performance dashboards for IT Risk, BCP & Data Privacy for Senior Management & Board Risk Reports on DFS and projects.
ACADEMIC BACKGROUND
• Bachelor’s degree in Information Technology, Computer science, business, or related fields.
• Strong knowledge of Information Security related frameworks/ Regulations/such as, ISO 27001, NIST 800-53 or other leading industry certifications e.g. CompTIA Security +, CEH, CISA.
• At least 5 years of Banking or Information Technology Experience with exposure to Digital Financial Services (DFS) & Projects.
• Knowledgeable in IT operations, IT Controls, IT Risk, IT Audit & Project Management.
• Knowledge on Data Protection laws & General Data Protection Regulations (GDPR)/Kenya Data Protection Act, 2019 & Regulations, CBK guidelines.
SKILLS & COMPETENCIES
• Excellent interpersonal & Communication Skills
• Working in Teams
• Excellent analytical skills
• Problem solving skills
• Excellent knowledge of security tools
• Report writing skills
PROFESSIONAL CERTIFICATION
• Professional qualifications such as Certified Information Systems Security Professional CISA, Certified Information Systems Security Professional CISM or Certified Information Systems Security Professional (CISSP).
Application Form
Position Applying For: Officer, Digital Financial Services & Project Risks
Full job description (PDF): https://sidianbank.co.ke/wp-content/uploads/2023/06/Sidian-Bank-Recruitment-Privacy-Notice-June-2023.pdf?pid=explorer&efh=false&a=v&chrome=false&embedded=true