Reporting Line
\nMANAGER IAM<\/p>\n
Location
\nTanzania Head Office<\/p>\n
Department
\nCYBERSECURITY UNIT<\/p>\n
Number of openings
\n1<\/p>\n
Job Purpose<\/p>\n
The ESB & Digital Channels Security Specialist safeguards the bank\u2019s integration fabric and customer-facing digital platforms by ensuring the confidentiality, integrity, and availability of services that traverse the Enterprise Service Bus (ESB) and all digital channels (mobile banking, internet banking, agency banking, USSD, card switch, open APIs).
\nThe role designs and enforces security controls for APIs, services, and channel applications; continuously monitors for threats and anomalies; manages access and certificates\/keys; and drives secure change, patching, and incident response across the integration and channels estate.
\nWorking closely with Architects, Digital Banking, Core Banking, Network\/SOC, Risk, and Vendor teams, the specialist ensures every service integration and channel release adheres to security standards and regulatory requirements, reduces fraud and cyber exposure, and maintains resilient, compliant, and trusted digital banking experiences.<\/p>\n
Principle Responsibilities<\/p>\n
Secure the middleware layer (ESB) and the APIs that connect critical systems.
\nManage API security gateways and Proxies to enforce security policies, rate limiting, and threat protection for internal and external APIs.
\nConduct security reviews on ESB and Digital Channels.
\nCoordinate Security assessments and penetration tests on ESB and Digital Channels.
\nImplement security controls to protect against common attacks on digital channels.
\nOwn security patterns for ESB\/API gateway and channel integrations.
\nEnforce certificates lifecycle within the ESB and digital channel platforms.
\nDesign API & channel security monitoring use cases in SIEM\/Fraud systems.
\nConduct threat modeling for new channel features and partner APIs.
\nManage secrets, keys, and tokens with HSM\/KMS and rotation policies.
\nSecurity testing for channels (DAST\/mobile app assessments, API pen tests).
\nCollaborate on WAF\/API gateway policies and bot management.
\nReview SDKs & mobile app hardening (obfuscation, anti-tamper, cert pinning).
\nValidate logging & traceability across ESB, channels, and backends.
\nServe as the primary security expert to ESB And Digital Channels Platforms.
\nAny other roles and responsibilities as may be assigned by management.<\/p>\n
Qualifications Required<\/p>\n
Bachelor\u2019s degree in computer science, Cyber Security, Software engineering or related academic field.
\nIndustry certifications such as CISSP, CEH, OSCP, or CSSLP are\u00a0a plus.
\nMinimum of 3 years of experience in Cyber Security and Strong foundation of the required skills and knowledge through integration or channels security within financial services.<\/p>\n
\u00b7ESB Platforms and their complexities, interrelations with digital channels.
\nCertificates life cycle management, Secure coding standards solid understanding.
\nMobile and web security understanding.
\nFamiliarity with security frameworks and standards (e.g., NIST, ISO 27001, PCI DSS).
\nBasic knowledge of DevSecOps, CI\/CD pipeline security, and cloud platforms.
\nUnderstanding of ICT infrastructure, networks, and application development.
\nAnalytical and problem-solving skills, especially in identifying and mitigating security risks.
\nBasic project management and documentation skills.
\nAPI security policy design and gateways configuration.
\nTLS\/cert lifecycle automation and secrets management.
\nSIEM use-case design for API\/channel telemetry.
\nSecure onboarding of third-party fintech partners.
\nHands-on with API gateways\/ESB and channel protection measures.<\/p>\n
CRDB Commitment<\/p>\n
CRDB Bank is dedicated to upholding Sustainability and ESG practices and encourage applicants who share this commitment. The Bank also promotes an inclusive workplace, hence applications from women and individual with disabilities are encouraged.
\nIt is important to note that CRDB Bank does not charge any fees for the application or recruitment process, and any requests for payment should be disregarded as they do not represent the bank\u2019s practices.
\nOnly Shortlisted Candidates will be Contacted.<\/p>\n
Deadline
\n2026-02-12<\/p>\n
Employment Terms
\nPERMANENT<\/p>\n
Sharing is Caring! Click on the Icons Below and Share<\/p>\n","protected":false},"author":2,"featured_media":0,"template":"","meta":{"_promoted":"","_job_location":"","_application":"https:\/\/careers.crdbbank.co.tz\/jobs","_company_name":"CRDB Bank","_company_website":"","_company_tagline":"","_company_twitter":"","_company_video":"","_filled":0,"_featured":0,"_remote_position":0,"_job_salary":"","_job_salary_currency":"","_job_salary_unit":""},"job_listing_region":[11],"job-categories":[],"job-types":[12],"class_list":{"0":"post-3138","1":"job_listing","2":"type-job_listing","3":"status-expired","4":"hentry","5":"job_listing_region-tanzania","7":"job-type-full-time"},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/job-listings\/3138","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/job-listings"}],"about":[{"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/types\/job_listing"}],"author":[{"embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/users\/2"}],"wp:attachment":[{"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/media?parent=3138"}],"wp:term":[{"taxonomy":"job_listing_region","embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/job_listing_region?post=3138"},{"taxonomy":"job_listing_category","embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/job-categories?post=3138"},{"taxonomy":"job_listing_type","embeddable":true,"href":"https:\/\/jobs.dataaxisnode.com\/tanzania\/wp-json\/wp\/v2\/job-types?post=3138"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}