Website NMB Bank
NMB Bank
Senior Manager; Internal Audit ICT & Project Audits
Position(s): 1
Job Location: Head Office
Opening Date: 24-Nov-2025
Closing Date: 09-Dec-2025
Job Purpose
To lead and manage ICT, Cybersecurity, and Project Audits within the Internal Audit Department. The role is responsible for developing and executing audit strategies across ICT systems, cybersecurity controls, and key bank projects. It ensures effective risk management, compliance, audit quality, and operational efficiency.
The role provides leadership, collaborates with ICT and business units, and supports other Internal Auditors in executing business process audits in line with bank policies, regulations, and data privacy obligations.
Main Responsibilities
1. Leadership & Strategy
- Lead the development and execution of ICT and Project audit strategy in alignment with Internal Audit departmental goals.
- Provide leadership, mentoring, and guidance to the ICT and Project Audit team, fostering a culture of excellence and innovation.
- Work closely with audit teams to identify opportunities where ICT capabilities can add value and improve audit effectiveness.
2. Audit Planning & Execution
- Develop and implement an annual risk-based Internal Audit plan aligned with business objectives and risk assessments.
- Lead end-to-end execution of ICT risk-based audits, from planning to reporting.
- Assess ICT governance and Cybersecurity internal controls to ensure confidentiality, integrity, and availability of bank systems.
- Evaluate ICT risk management strategies and recommend improvements.
- Perform vulnerability assessments, penetration testing, and compliance audits.
- Ensure audit processes align with best practices (COBIT, NIST, ISO 27001/27701, CIS, ITIL).
3. Stakeholder Collaboration
- Engage internal and external stakeholders on strategic audits, communication, and risk insights.
- Provide recommendations to enhance ICT, Cybersecurity, and Project governance practices.
- Present complex ICT and Cybersecurity findings to non-technical audiences with actionable recommendations.
- Collaborate with first-line and second-line teams to mitigate ICT and Cyber risks and strengthen controls.
4. Continuous Improvement
- Stay updated on emerging ICT and Cybersecurity audit trends and methodologies.
- Recommend new technologies, tools, and techniques to enhance audit efficiency.
- Monitor and assess the effectiveness of ICT and Cybersecurity controls, adjusting audit approaches as necessary.
5. Reporting & Documentation
- Prepare clear, concise, and insightful audit reports and dashboards for senior management and the Board Audit Committee.
- Ensure proper documentation of all ICT and Cybersecurity audit activities and compliance with internal and regulatory standards.
- Maintain accurate records of data sources, methods, and analyses used to support audit findings.
6. Training & Support
- Train and support the ICT and Cybersecurity audit team on audit methodologies and tools.
- Share best practices and promote a culture of data-driven audit decision-making.
Knowledge and Skills
Business & Audit Knowledge
- Strong understanding of core banking processes and enterprise-wide risk management.
- In-depth experience with audit cycles, frameworks, internal audit standards, and audit leadership.
Technical Skills
- Excellent knowledge of internal audit practices and tools.
- Strong understanding of IT governance frameworks and security standards.
- Knowledge of data privacy laws (PDPA, GDPR).
- Familiarity with cybersecurity threat landscapes, ethical hacking, and emerging IT risks.
Behavioral Competencies
- Strong analytical and problem-solving skills.
- Excellent communication, reporting, and presentation capabilities.
- Strong project management and organizational skills.
- High integrity, professionalism, and commitment to continuous improvement.
- Leadership capabilities: coaching, developing others, delegating, and setting high work standards.
Qualifications and Experience
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting, Finance, Economics, or related field.
- Master’s degree or professional certifications (ACCA, CPA, CISA, CISSP, CDPSE, CRISC, CISM, CEH, ISO 27001 Lead Auditor) are added advantages.
- Minimum 5 years’ experience in auditing, IT audits, cybersecurity audits, or risk management.
- At least 3 years’ leadership experience managing teams and leading audit or project initiatives.
- Hands-on experience with SIEM tools, vulnerability scanners, security monitoring systems, and testing technologies.
- Experience with cloud security, ITGCs, penetration testing, and digital forensics is an advantage.
Additional Information
- NMB Bank Plc is an Equal Opportunity Employer committed to diversity and gender balance.
- Female candidates and persons with disabilities are strongly encouraged to apply.
- NMB Bank Plc does not charge any fee during the recruitment process.
- Only shortlisted candidates will be contacted.
To apply for this job please visit careers.nmbbank.co.tz.