Reporting Line
\nMANAGER IAM<\/p>\n
Location
\nTanzania Head Office<\/p>\n
Department
\nCYBERSECURITY UNIT<\/p>\n
Number of openings
\n1<\/p>\n
Job Purpose<\/p>\n
The CBS Security Specialist is responsible for ensuring the confidentiality, integrity, and availability of the bank\u2019s Core Banking System (CBS) and its supporting environments. The role safeguards the Core Banking System (CBS) and connected ecosystems (payments, channels, integrations) by designing, implementing, and monitoring robust security controls across the application, data, integration, and infrastructure layers. It also drives secure SDLC, threat modeling, vulnerability management, compliance, and incident response specifically for core banking platforms.<\/p>\n
Principle Responsibilities<\/p>\n
Own CBS Security Architecture \u2013 define and maintain security patterns for CBS, ESB\/API gateways, batch jobs, and downstream systems.
\nSecure SDLC for CBS \u2013 embed security requirements for all the CBS changes.
\nThreat Modeling & Risk Assessments \u2013 conduct modeling for CBS modules, interfaces, and new products; track respective risks to closure.
\nHardening & Configuration Baselines \u2013 implement hardening for OS, DB, app servers, and CBS modules.
\nDatabase & Data Security \u2013 enforce encryption, key management, masking, auditing, and least privilege for all the CBS modules and schemas.
\nIdentity & Access Controls \u2013 enforce RBAC, SoD for CBS roles, privileged access management (PAM), and periodic access attestation and recertification.
\nVulnerability Management \u2013 coordinate scanning\/patching for CBS stack, triage findings, and drive SLA-based remediation by criticality and business impact.
\nSecurity Monitoring & Use Cases \u2013 develop CBS-specific SIEM detections.
\nIncident Response (IR) \u2013 lead CBS-related Incident Response playbooks, including forensics and lessons learned.
\nChange\/Risk Governance \u2013 review CRs affecting CBS; sign-off on go-live security readiness.
\nCompliance & Audit Readiness \u2013 ensure alignment with applicable standards and regulatory directives.
\nBusiness Continuity \u2013 validate DR\/BCP for CBS (RPO\/RTO, backups, logs, failover, key recovery, reconciliation controls, etc.).
\nThird-Party Risk \u2013 assess vendors, SLAs, secure configurations, and data processing agreements.
\nSecurity Awareness (Targeted) \u2013 train CBS operations, developers, and product owners on secure change, access hygiene, and fraud-aware controls.
\nServe as the primary security expert to Core Banking Environment.<\/p>\n
Qualifications Required<\/p>\n
Bachelor\u2019s degree in Cybersecurity, computer science, Information Security, Engineering, or related field.
\nIndustry Certifications: CISA, CCSP, CISM, CRISC or CEH will be a plus.
\nExperience with secure integration patterns (APIs, ESB, microservices), including authentication, authorization, tokenization, and TLS best practices.<\/p>\n
Adequate understanding of Core Banking Systems (CBS) architecture, including modules, integration points, and typical attack vectors in financial systems.
\nStrong knowledge of database security (e.g., Oracle, MSSQL), including encryption, access control, auditing, and secure configurations.
\nFamiliarity with payment systems security such as SWIFT, ISO, card systems, digital channels, and related fraud-prevention controls.
\nUnderstanding threat modeling and vulnerability assessment for banking applications, including secure SDLC, code review practices, and security testing tools.
\nRisk-based decisioning, balancing security with availability in high-stakes banking operations.
\nCore Banking Systems architecture, EOD\/BOD, GL posting flows, batch jobs, and common attack vectors.
\nApplication Security: OWASP Top 10, secure coding patterns, code review, dependency & secret scanning.
\nInfrastructure Security: OS hardening, virtualization, Oracle\/MSSQL hardening, database encryption, data masking, fine-grained auditing (FGA), least privilege.
\nIntegration & API Security, Monitoring & Incidents Response.
\n4+ years in application or platform security within banking\/financial services, with 3+ years hands-on securing CBS or equivalent mission-critical systems.<\/p>\n
CRDB Commitment<\/p>\n
CRDB Bank is dedicated to upholding Sustainability and ESG practices and encourage applicants who share this commitment. The Bank also promotes an inclusive workplace, hence applications from women and individual with disabilities are encouraged.
\nIt is important to note that CRDB Bank does not charge any fees for the application or recruitment process, and any requests for payment should be disregarded as they do not represent the bank\u2019s practices.
\nOnly Shortlisted Candidates will be Contacted.<\/p>\n
Deadline
\n2026-02-12<\/p>\n
Employment Terms
\nPERMANENT<\/p>\n
Sharing is Caring! Click on the Icons Below and Share<\/p>\n","protected":false},"author":2,"featured_media":0,"template":"","meta":{"_promoted":"","_job_location":"","_application":"https:\/\/careers.crdbbank.co.tz\/jobs","_company_name":"CRDB Bank","_company_website":"","_company_tagline":"","_company_twitter":"","_company_video":"","_filled":0,"_featured":0,"_remote_position":0,"_job_salary":"","_job_salary_currency":"","_job_salary_unit":""},"job_listing_region":[11],"job-categories":[],"job-types":[12],"class_list":{"0":"post-3137","1":"job_listing","2":"type-job_listing","3":"status-expired","4":"hentry","5":"job_listing_region-tanzania","7":"job-type-full-time"},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/job-listings\/3137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/job-listings"}],"about":[{"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/types\/job_listing"}],"author":[{"embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/users\/2"}],"wp:attachment":[{"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/media?parent=3137"}],"wp:term":[{"taxonomy":"job_listing_region","embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/job_listing_region?post=3137"},{"taxonomy":"job_listing_category","embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/job-categories?post=3137"},{"taxonomy":"job_listing_type","embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/job-types?post=3137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}