Examiner – IT and Cyber Security (CBs & NBFIs)

Requirements

• First Class or Second Class Upper Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Computer Engineering or a closely related field.
  
• Possession of at least one of the certifications as; a Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), Certified in Risk and Information Systems Control (CRISC) with ISO 27001 Lead Auditor or CompTIA Security+ is mandatory.
  
• A master’s degree in any of the aforementioned fields is an added advantage.
  

Experience

• Minimum 5 years of relevant work experience in IT audit, cybersecurity, or risk management, preferably in a Financial Institution or Audit Firm.
  
• Familiarity with national and international cybersecurity standards such as NIST, ISO 27001 among others.
  
• Age 30.0 to 37.0 Years
  

Examination and Assessment

• Conduct onsite and offsite IT and Cyber examinations of financial institutions.
  
• Evaluate IT governance structures, cybersecurity frameworks and resilience against operational disruptions.
  
• Review core banking systems, payment platforms and emerging digital banking channels.
  
• Assess the adequacy IT General Controls (ITGCs), application controls, and disaster recovery/business continuity plans.
  

Risk & Compliance Review

• Evaluate banks’ compliance with regulatory requirements, including BOU guidelines, Basel III operational risk standards and data protection regulations.
  
• Assess implementation of cybersecurity frameworks (ISO 27001, NIST CSF, CIS Controls).
  
• Identify and report deficiencies, systemic risks, and non-compliance issues.
  

Incident Response Oversight

• Regularly monitor banks’ responses to major IT or cybersecurity incidents.
  
• Assess incident root cause analysis, remediation actions, and communication to stakeholders.
  
• Recommend improvements banks’ incident detection and response capabilities.
  

Reporting & Enforcement

• Prepare clear and concise examination reports with findings, risks, and regulatory recommendations.
  
• Present examination outcomes at both EXCO and Board exit meetings.
  
• Recommend enforcement actions for non-compliance, including sanctions where necessary.
  

Policy Development & Advisory

• Contribute to the development and updating of IT and Cyber supervisory policies.
  
• Provide technical advisory to other examiners and bank supervision teams on IT risk trends.
  

Continuous Improvement & Training

• Stay updated on emerging threats, technologies and international best practices in banking cybersecurity.
  
• Carry out regular training of team members and participate/conduct annual training session to provide guidance to SFIs Board members and Executive management to improve their cybersecurity practices and compliance with regulations.
  
• Mentor other examiners and deliver training to enhance examination capabilities.
  

Stakeholder collaboration

• Work closely with SFIs, other regulatory bodies and cybersecurity experts to enhance the overall cybersecurity framework.