Assistant, Data and Cyber Risk for Operational Risk Management - PGRF at the African Development Bank Group (AfDB)

African Development Bank Group (AfDB) - Established in 1964, the African Development Bank is the premier pan-African development institution, promoting economic growth and social progress across the continent. There are 80 member states, including 54 in Africa (Regional Member Countries). The Bank’s development agenda is delivering the financial and technical support for transformative projects that will significantly reduce poverty through inclusive and sustainable economic growth.

We are recruiting to fill the position below:

Job Title: EOI - Assistant: Data and Cyber Risk for Operational Risk Management - PGRF

Location:  Remote
Consultant type: Individual Consultant
Job family: Information Technology
Function: Group Risk Management
Unit: Operational Risk Management
Duration of the services: 6 months 
Start Date is expected to be: Second half of June 2023

Brief Description

• The African Development Bank (the “Bank”) hereby invites Individual Consultants to indicate their interest to provide assistance in Data and Cyber Risk at the Operational Risk Management Unit at the African Development Bank.
• The assignment is with the Operational Risk Management Unit and will entail:
  • Assist the team on all data analysis needs regarding operational risk activities
  • Assist the team in the generation of the various periodic reports necessary for the monitoring of Key Risk Indicators in the banks. Propose improvements to KRI reports and management
  • Follow up on KRI data collection and update KRI and risk assessment data in the GRC system
  • Proactively identify, analyze, and prioritize cybersecurity risks for new and legacy systems and processes in the Bank. Review supporting documentation for cyber risk and its mitigation to identify gaps and propose process and control improvements
  • Contribute to cyber risk awareness and sensitization on emerging risks and technologies for staff within the unit. Recommend risk areas and scenarios for consideration in the unit’s risk assessment and testing programs
  • Participate in Risk and Control Self-Assessment (RCSA) sessions across the different departments of the Bank and incorporate cyber risk assessment and Key Risk Indicators in risk registers where applicable. Propose ranking criteria to support risk and control assessments
  • Contribute to ICFR process mapping and reviews focusing on IT General and Application controls. Support testing exercises including penetration tests.
  • Conduct ad hoc studies and prepare presentations at the request of the Head of the Unit.
  • Any other task of a similar nature assigned by the supervisor
• Given the aforementioned scope, the consultant is expected to demonstrate good
  knowledge in leveraging statistical/analytical practices to drive value, a good experience with R Studio and Python, and experience or high interest that can be demonstrated in IT and cyber risk management

Requirements

• A minimum of five (5) years of professional experience and a Master's Degree is essential.
• Key skills necessary for this assignment include experience in data analysis, the use of the programming language R, interest in operational risk activities, familiarity with cyber risk identification, assessment and mitigation, proficiency in the use of SAP solution and Microsoft Office suite, and strong communication skills.
• Background in Accounting or Finance, relevant information security certification (e.g., CISSP), and proficiency in both English and French will be of added advantage.
• The consultant will be expected to submit their technical and financial proposals.

Application Closing Date
23rd May, 2023 at 15:00 GMT

Method of Application
Interested and qualified candidates should send their Expressions of interest to: [email protected] cc: [email protected] and [email protected] using "Assistance in Data and Cyber Risk for Operational Risk Management" as the subject of the mail.

Click here for more information

Click here for the Job Description (PDF)

Note

• The Operational Risk Unit invites individual Consultants to indicate their interest in providing the above-described services.
• Interested Consultants shall provide information on their qualifications and experience demonstrating their ability to undertake this Assignment (CV, documents, reference to similar services, experience in similar assignments, references, etc.).
• The eligibility criteria, the establishment of a short list and the selection procedure shall be in conformity with the Bank’s Procurement Policy for Recruitment of Corporate Consultants.
• Please note that interest expressed by a Consultant does not imply any obligation on the part of the Bank to include him/her in the shortlist. It is expected that interested Individual Consultants shall already be registered or register in the Bank’s DACON System for consultants. 
• A shortlist of three to six individual consultants will be established at the end of the request of expressions of interest.
• The consultants on the shortlist will be judged on the following criteria: on the basis of their submission, level of education in general, number of years of experience relevant to the assignment, language skills, knowledge of the working environment, regional and prior Bank experience.
• The estimated duration of service is 6 months, and the estimated starting date is in second half of June 2023.
• The consultant will carry out the assignment remotely given the current working environment.
• Interested Individual Consultants may obtain further information and clarifications from [email protected] during the Bank’s working hours between 8:00 to 17:00 GMT.