Job Description
Reporting to Manager,Insurance Supervision,the Senior IT Inspector is responsible for conducting risk-based supervision and inspection of IT, cybersecurity, data protection, and operational resilience within regulated institutions. The position assesses compliance with applicable regulatory requirements, evaluates IT governance, risk management and internal controls, identifies technology and cybersecurity risks, and recommends corrective actions.
Job Responsibilities
-
Conduct on-site and off-site surveillance to identify and assess risks related to information technology, cybersecurity, data privacy, business continuity, and operational resilience within regulated institutions.
-
Participate in the development, review, and enhancement of IT and cybersecurity supervisory methodologies, assessment tools, guidelines, and regulatory instruments.
-
Contribute to the development and implementation of risk-based IT and cybersecurity supervisory plans, thematic reviews, and targeted supervisory interventions.
-
Participate in sector-wide cybersecurity initiatives, assessments, and exercises in collaboration with relevant authorities and stakeholders.
-
Assess regulated institutions’ compliance with applicable IT and cybersecurity regulatory requirements.
-
Evaluate the effectiveness of technical security controls, including network security, access management, authentication, vulnerability and patch management, security monitoring, data protection, logging, and incident detection and response.
-
Assess regulated institutions’ business continuity, disaster recovery, and operational resilience arrangements, including business impact analysis, recovery objectives, disaster recovery sites, recovery testing, and resilience of critical systems.
-
Evaluate the effectiveness of IT governance structures, risk management frameworks, internal controls of regulated institutions.
-
Prepare inspection and regulatory reports, and corrective recommendations.
-
Present inspection findings and supervisory assessments to senior management, Boards, and relevant committees of regulated institutions and communicate required corrective actions.
-
Monitor emerging technologies and assess their potential impact on regulated institutions and the financial sector.
-
Monitor and follow up on remediation of identified IT and cybersecurity weaknesses, including review of action plans, progress reports, supporting evidence, and implementation deadlines.
-
Support the supervision of technology-driven business models, InsurTech initiatives, and other emerging technology arrangements within the regulated sector.
-
Contribute to staff capacity building and knowledge sharing through technical training, awareness sessions, workshops, and development of supervisory resources.
Job Requirements
-
A master’s degree in information technology (IT), Information and Communication Technology (ICT), Computer Engineering, Computer Science, Information Systems, Cybersecurity, or a related field
-
A minimum of five (5) years of relevant professional experience in cybersecurity, IT audit, information systems, system administration, network administration, IT risk management, information security, or other related areas.
-
Professional certifications such as CISA, CRISC, CISSP, CISM, AAIA, or other relevant IT audit, cybersecurity, risk management, or information security certifications will be an added advantage.
-
35 Years
-
Female Candidates are encouraged to Apply
Click here to visit the source
