Assistant, Data and Cyber Risk for Operational Risk Management - PGRF at the African Development Bank Group (AfDB)

African Development Bank Group (AfDB) - Established in 1964, the African Development Bank is the premier pan-African development institution, promoting economic growth and social progress across the continent. There are 80 member states, including 54 in Africa (Regional Member Countries). The Bank’s development agenda is delivering the financial and technical support for transformative projects that will significantly reduce poverty through inclusive and sustainable economic growth.

We are recruiting to fill the position below:

Job Title: EOI - Assistant: Data and Cyber Risk for Operational Risk Management - PGRF

Location:  Remote
Consultant type: Individual Consultant
Job family: Information Technology
Function: Group Risk Management
Unit: Operational Risk Management
Duration of the services: 6 months 
Start Date is expected to be: Second half of June 2023

Brief Description

• The African Development Bank (the “Bank”) hereby invites Individual Consultants to indicate their interest to provide assistance in Data and Cyber Risk at the Operational Risk Management Unit at the African Development Bank.
• The assignment is with the Operational Risk Management Unit and will entail:
  • Assist the team on all data analysis needs regarding operational risk activities
  • Assist the team in the generation of the various periodic reports necessary for the monitoring of Key Risk Indicators in the banks. Propose improvements to KRI reports and management
  • Follow up on KRI data collection and update KRI and risk assessment data in the GRC system
  • Proactively identify, analyze, and prioritize cybersecurity risks for new and legacy systems and processes in the Bank. Review supporting documentation for cyber risk and its mitigation to identify gaps and propose process and control improvements
  • Contribute to cyber risk awareness and sensitization on emerging risks and technologies for staff within the unit. Recommend risk areas and scenarios for consideration in the unit’s risk assessment and testing programs
  • Participate in Risk and Control Self-Assessment (RCSA) sessions across the different departments of the Bank and incorporate cyber risk assessment and Key Risk Indicators in risk registers where applicable. Propose ranking criteria to support risk and control assessments
  • Contribute to ICFR process mapping and reviews focusing on IT General and Application controls. Support testing exercises including penetration tests.
  • Conduct ad hoc studies and prepare presentations at the request of the Head of the Unit.
  • Any other task of a similar nature assigned by the supervisor
• Given the aforementioned scope, the consultant is expected to demonstrate good
  knowledge in leveraging statistical/analytical practices to drive value, a good experience with R Studio and Python, and experience or high interest that can be demonstrated in IT and cyber risk management

Requirements

• A minimum of five (5) years of professional experience and a Master's Degree is essential.
• Key skills necessary for this assignment include experience in data analysis, the use of the programming language R, interest in operational risk activities, familiarity with cyber risk identification, assessment and mitigation, proficiency in the use of SAP solution and Microsoft Office suite, and strong communication skills.
• Background in Accounting or Finance, relevant information security certification (e.g., CISSP), and proficiency in both English and French will be of added advantage.
• The consultant will be expected to submit their technical and financial proposals.

Application Closing Date
23rd May, 2023 at 15:00 GMT