Senior Manager Cyber Defence Job Vacancy at CRDB Bank PLC

Organization: CRDB Bank PLC – Benki ya CRDB

Location: Tanzania Head Office

Category: Information and Communication Technology (ICT) / Cybersecurity

Job Type: Full-Time

Application Deadline: 24 November 2026

CRDB Bank PLC is inviting applications from qualified and experienced cybersecurity professionals for the position of Senior Manager Cyber Defence at its Tanzania Head Office.

Job Purpose

The Senior Manager Cyber Defence will provide strategic, operational and technical leadership over the Bank’s cybersecurity monitoring, threat detection, threat intelligence, proactive threat hunting, cyber incident response and digital forensics capabilities.

The role covers the Bank’s customers, subsidiaries, business services, information assets, critical financial systems, digital channels, infrastructure, cloud environments and third-party connections. It involves identifying, investigating, containing, eradicating and reporting cybersecurity threats and incidents in a timely and effective manner.

The successful candidate will provide overall leadership to the Security Operations Centre (SOC), ensuring continuous security monitoring, effective alert triage, in-depth incident investigations, timely escalation, accurate case documentation and continuous improvement of detection rules and response playbooks.

The role will also direct intelligence-led threat hunting and oversee digital forensics and incident response readiness, including the investigation of major cyber incidents, preservation and analysis of digital evidence, root-cause determination, containment and recovery coordination, and post-incident reviews.

Key Responsibilities

1. Cyber Defence Strategy and Leadership

• Develop and execute the Bank’s Cyber Defence strategy, operating model, roadmap and annual operational plan, translating cyber risks, critical business services, emerging threats, incidents, technology changes and regulatory requirements into clear priorities.
• Provide leadership and direction to the SOC, Cyber Threat Hunting and Intelligence, and Digital Forensics and Incident Response functions, ensuring effective coordination and operational readiness.
• Ensure comprehensive Cyber Defence coverage across the Bank’s networks, endpoints, identities, applications, databases, digital channels, critical financial systems, cloud environments, third-party connections and regional operations.
• Provide timely advice, reports and presentations to the Head of Cybersecurity and senior management on material threats, incidents, attacker behaviour, detection capabilities, response readiness and required improvement actions.
• Manage the Cyber Defence budget, staffing, technology, specialist services, licences, training and operational expenditure.
• Maintain a prioritised improvement roadmap addressing identified capability, process, technology, resource and skills gaps.

2. Security Operations Centre (SOC) Management

• Provide overall leadership and oversight of the Bank’s Security Operations Centre, ensuring continuous security monitoring, threat detection, investigation and escalation.
• Ensure SOC operations align with the Bank’s risk profile, critical services, emerging threats, technology changes and lessons from previous incidents.
• Establish effective SOC governance, performance standards and escalation mechanisms.
• Ensure gaps in security visibility, monitoring and detection capabilities are promptly identified, prioritised and addressed.
• Drive continuous improvement of threat detection and response capabilities through incident lessons, threat intelligence, threat hunting, security testing and evolving threat patterns.
• Ensure SOC platforms remain resilient, integrated, properly supported and fit for purpose.

3. Cyber Threat Intelligence and Threat Hunting

• Provide strategic direction for the Bank’s Cyber Threat Intelligence and proactive Threat Hunting programmes.
• Ensure threat intelligence and hunting activities focus on credible threats relevant to the banking sector, the Bank’s technology environment and its countries of operation.
• Ensure threat intelligence delivers timely and actionable insights on emerging threats, attack campaigns and threat actors.
• Translate intelligence findings into improvements in monitoring, detection, incident readiness, security controls and cyber risk management.
• Promote effective threat intelligence sharing and collaboration across internal stakeholders, subsidiaries, trusted industry partners and relevant external cybersecurity bodies.

4. Digital Forensics and Incident Response

• Provide leadership and oversight of the Bank’s Digital Forensics capability, ensuring significant cyber incidents are effectively investigated and supported by reliable digital evidence.
• Ensure forensic investigations comply with legal and regulatory requirements, including evidence preservation and chain-of-custody procedures.
• Maintain strategic oversight of cyber incident management and response, ensuring incident response plans, escalation arrangements, decision-making authorities and procedures remain current and effective.
• Ensure significant cyber incidents are assessed, managed and escalated based on their operational, financial, customer, regulatory and reputational impact.
• Maintain readiness for major incidents affecting critical financial services and technology infrastructure.
• Ensure significant incidents undergo appropriate root-cause analysis and post-incident reviews to identify control weaknesses, systemic issues and lessons learned.
• Ensure corrective actions arising from forensic investigations and major incidents are assigned, tracked and escalated.
• Incorporate lessons learned into Cyber Defence capabilities and broader security improvements across the Bank.

5. Performance Management and Team Development

• Provide leadership, coaching and development for Cyber Defence leadership and specialist teams.
• Establish clear accountability, performance expectations, capability development priorities and succession plans.
• Establish and monitor Cyber Defence Key Performance Indicators (KPIs), Key Risk Indicators (KRIs) and service-performance measures.
• Provide management with clear visibility of threat detection, incident response, threat intelligence, readiness and operational effectiveness.
• Monitor Cyber Defence performance, material risks, capability gaps and improvement initiatives.
• Ensure significant issues are appropriately escalated to the Head of Cybersecurity and relevant governance forums.
• Strengthen collaboration across Cyber Defence, Cybersecurity Engineering, Offensive Security, Governance, Risk and Compliance (GRC), Cybersecurity Architecture and DevSecOps, ICT, Risk, Audit, Fraud, Legal, Compliance and subsidiaries.

Qualifications and Experience

Applicants must meet the following requirements:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, Computer Engineering, Telecommunications Engineering, Information Systems or a related academic field.
• Minimum of 7 years’ relevant experience in cybersecurity operations, security monitoring, cyber incident response, digital forensics, cyber threat intelligence or threat hunting.
• At least 3 years’ experience in a managerial, supervisory, team-lead or senior technical leadership role within a Security Operations Centre, Incident Response, Digital Forensics, Threat Intelligence or Cyber Defence function.
• Knowledge of relevant cybersecurity frameworks and standards, including NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, PCI DSS and MITRE ATT&CK.

Professional Certifications

Relevant professional certifications will be an added advantage, including:

• Certified Information Systems Security Professional (CISSP).
• Certified Ethical Hacker (CEH).
• Offensive Security Certified Professional (OSCP).
• Certified Chief Information Security Officer (CCISO).
• Certified Information Systems Auditor (CISA).
• CSA certification.

Technical Knowledge and Competencies

Candidates should demonstrate comprehensive knowledge and practical expertise in the following areas:

1. Security Operations and Incident Management

• SOC operating models, analyst processes, monitoring procedures and escalation arrangements.
• Cybersecurity incident management and response.
• Incident containment, eradication, recovery and post-incident reviews.
• Security monitoring, log management and detection engineering.
• Correlation-rule development, behavioural analytics, alert enrichment and rule tuning.
• Security automation and incident response playbooks.

2. Digital Forensics and Investigation

• Digital-forensics methodologies.
• Evidence acquisition and preservation.
• Chain-of-custody procedures.
• Forensic analysis and malware analysis.
• Cyber incident investigation and reporting.

3. Cyber Threat Intelligence and Threat Hunting

• Cyber threat intelligence lifecycle management, including intelligence requirements, collection, validation, analysis, dissemination and feedback.
• Proactive threat hunting methodologies.
• Adversary behaviours and attack techniques.
• Indicators of Compromise (IoCs).
• Hypothesis-driven investigations.
• MITRE ATT&CK framework and its application in identifying attacker tactics, techniques and procedures (TTPs).

4. Cybersecurity Technologies

Strong understanding of the following technologies:

• Security Information and Event Management (SIEM).
• Security Orchestration, Automation and Response (SOAR).
• Endpoint Detection and Response (EDR).
• Extended Detection and Response (XDR).
• Network Detection and Response (NDR).
• Threat intelligence platforms.
• Digital-forensics and malware-analysis tools.
• Security incident and case-management technologies.

5. Banking and Financial Sector Security

• Banking operations and payment services.
• Core Banking Systems.
• Digital banking channels.
• Card environments.
• Mobile and internet banking.
• APIs and financial-sector cyber threats.
• Cloud security monitoring.
• Identity-related threats.
• Digital-channel threats and third-party compromise.

6. Risk, Compliance and Operational Resilience

• Cyber risk management and regulatory compliance.
• Business continuity and disaster recovery.
• Crisis management.
• Audit and evidence-management requirements.
• Security monitoring across cloud environments and third-party connections.
• Modern cyberattack methods and emerging security threats.

Equal Employment Opportunity

CRDB Bank is committed to upholding sustainability and Environmental, Social and Governance (ESG) practices. The Bank promotes an inclusive workplace and encourages applications from women and persons with disabilities.

Important Notice: CRDB Bank does not charge any fees for the application or recruitment process. Applicants should disregard any requests for payment, as these do not represent the Bank’s recruitment practices.

Only shortlisted candidates will be contacted.

How to Apply

Interested candidates should submit their applications online through the official CRDB Bank PLC careers portal.

Application Deadline: 24 November 2026

CLICK HERE TO APPLY