Head of Information Security Risk

Job description

FIRST ALLIANCE BANK (ZAMBIA) — WE ARE HIRING!
Proudly Zambian • #YourPartnerToProsperity

First Alliance Bank is inviting applications from suitably qualified, seasoned, and visionary professionals to fill the strategic senior role of Head of Information Security Risk based at Head Office in Lusaka.

Position: Head of Information Security Risk
Institution: First Alliance Bank
Location: Lusaka, Zambia
Employment Type: Full-Time

Role Overview & Key Responsibilities:

• Cyber and Information Security Risk Governance: Develop, implement, and lead the Bank’s overarching information security and cybersecurity risk management framework aligned with regulatory guidelines and international standards (ISO/IEC 27001).
• Risk Assessments and Control Effectiveness: Conduct continuous threat modeling, vulnerability evaluations, cybersecurity maturity assessments, and monitor the effectiveness of IT controls.
• Vulnerability, Threat, and Remediation Oversight: Direct vulnerability assessments, penetration testing oversight, threat intelligence gathering, and supervise security patch management remediation.
• Incident Risk, Resilience, and Recovery Oversight: Oversee cyber incident response plans, business continuity, disaster recovery simulations, and security operations monitoring.
• Third-Party, Outsourcing, and Data Risk: Evaluate cybersecurity and data privacy risks associated with technology vendors, cloud providers, and digital banking partners.
• Regulatory, Assurance, and Governance Reporting: Prepare comprehensive cyber risk reports for the Board Risk Committee, Executive Management, and Bank of Zambia regulators.
• Risk Culture and Capability: Drive enterprise-wide cybersecurity awareness campaigns, security hygiene culture, and continuous security capacity building.

Educational Background & Professional Experience:

• Bachelor’s Degree in Information Security, Cybersecurity, Computer Science, Information Systems, Risk Management, or a closely related discipline.
• At least 5 years of progressive experience in cyber/information security, technology risk, IT audit, or operational risk, including at least three (3) years in a supervisory or management capacity.
• Banking and financial sector experience is strongly preferred.
• Professional Certifications: Recognised credentials such as CISM, CISSP, CRISC, CISA, or ISO/IEC 27001 Lead Auditor / Lead Implementer are required; additional relevant cyber certifications are an added advantage.
• Proven leadership, high strategic thinking, sound regulatory knowledge, and executive communication capabilities.

How to Apply:

Interested candidates should send their detailed CV and cover letter to:

📧 Email Application: recruitment@fabank.co.zm
📝 Subject Line: Head of Information Security Risk

Application Deadline: 08th November 2026

For more details, visit www.firstalliancebankzambia.com