The Central Bank of Kenya (CBK) invites applications from skilled and dedicated professionals to fill several critical positions across its departments. These roles provide exceptional opportunities for qualified individuals to contribute to CBK’s mandate of promoting monetary stability, ensuring financial system soundness, and maintaining effective supervision and regulation of Kenya’s banking sector.
The Bank continues to strengthen its operations through innovation, compliance, and digital transformation, and is therefore seeking dynamic professionals with strong analytical and operational abilities to support its institutional objectives.
1. CYBER RISK ANALYST (VA/PT) – BUSINESS ANALYST 1
Job Purpose
The Cyber Risk Analyst (VA/PT) is responsible for executing and coordinating vulnerability assessment and penetration testing (VA/PT) exercises across regulated financial institutions. The position ensures continuous identification and mitigation of cyber threats, supporting CBK’s role in promoting a secure and resilient financial sector.
Detailed Job Description
- Conduct targeted vulnerability assessments and penetration tests to identify security flaws within systems and applications used by regulated entities.
- Prepare comprehensive reports highlighting technical findings, exploitation paths, and recommendations for remediation.
- Review results of all vulnerability and penetration testing exercises before release to ensure accuracy and quality.
- Provide technical guidance on corrective measures to mitigate cybersecurity risks identified during assessments.
- Gather and analyse open-source intelligence (OSINT) to monitor emerging cyber threats and adversarial tactics.
- Collaborate with incident response teams to identify attack vectors, analyse raw logs, and uncover suspicious activity.
- Participate in post-incident investigations to determine root causes, ensuring swift recovery and lessons learned.
- Develop, review, and update cybersecurity training and awareness materials for institutions within the banking sector.
- Maintain an updated inventory of VA/PT tools, technologies, and methodologies used by the cybersecurity unit.
- Document and track the status of cyber incidents across regulated institutions to ensure proper closure.
- Conduct continuous research on emerging threat actor tactics, techniques, and procedures (TTPs) to inform defensive strategies.
- Carry out any other assignments within the scope of cyber risk management as may be required by the department.
2. DIGITAL FORENSICS ANALYST – SENIOR BUSINESS ANALYST 2
Job Purpose
The Digital Forensics Analyst plays a key role in investigating cybersecurity incidents, analysing digital evidence, and ensuring adherence to forensic standards and legal procedures. The position provides analytical support to digital investigations, helping CBK maintain system integrity and sector-wide cyber resilience.
Detailed Job Description
- Manage and coordinate the activities of the Digital Forensics and Incident Response section in collaboration with the unit manager.
- Lead investigations into complex digital incidents to uncover the nature, source, and extent of cyber-attacks.
- Conduct digital evidence collection, preservation, and analysis across various platforms, including Windows, Linux, macOS, and virtual environments.
- Perform static and dynamic malware analysis to determine malicious behaviour, attack capabilities, and propagation patterns.
- Execute memory forensics to identify persistence mechanisms, malware indicators, and compromise footprints.
- Compile comprehensive digital forensics reports summarising methodologies, findings, and mitigation recommendations.
- Continuously refine forensic and incident-response processes to align with international best practices and regulatory expectations.
- Maintain and update forensic lab equipment, ensuring calibration, readiness, and data integrity.
- Develop and enforce digital forensic procedures and chain-of-custody documentation to preserve evidence credibility.
- Maintain detailed logs of cases, devices examined, and analyses conducted, ensuring auditability and transparency.
- Support incident-response operations by assisting in the containment and eradication of cyber threats.
- Keep abreast of global developments in digital forensics, reverse engineering, and malware research.
- Provide technical mentorship to junior staff and contribute to departmental knowledge sharing.
- Execute additional assignments that enhance the Bank’s cyber threat preparedness and investigative capacity.
3. SENIOR BUSINESS ANALYST, MONITORING AND COMPLIANCE – SENIOR BUSINESS ANALYST 2
(General Services Department)
Job Purpose
The Senior Business Analyst, Monitoring and Compliance, ensures the effective monitoring of operations and adherence to policies and procedures within the General Services Department. The position supports the implementation of compliance frameworks, risk identification, and continuous improvement of internal processes aligned to CBK’s strategic goals.
Detailed Job Description
Strategic Responsibilities
- Contribute to the formulation and execution of departmental strategic plans and objectives.
- Track the progress of strategic initiatives and provide reports on milestones and performance metrics.
- Coordinate the preparation and periodic review of operational manuals, standard operating procedures, and compliance policies.
- Support the implementation of key departmental projects in alignment with the CBK Strategic Plan.
- Promote teamwork, accountability, and performance-driven operations within the department.
Technical and Operational Responsibilities
- Identify, evaluate, and monitor operational risks that could impact departmental performance.
- Document business processes, workflows, and system specifications to support compliance and efficiency.
- Evaluate existing internal control mechanisms and recommend improvements where necessary.
- Foster a culture of risk awareness and compliance by providing technical advice and monitoring adherence to policies.
- Conduct periodic reviews to assess compliance levels and operational effectiveness.
- Liaise with the Internal Audit and Risk Department to ensure consistent application of risk management frameworks.
- Review and report on daily incident logs to ensure timely response and mitigation.
- Coordinate departmental staff training, mentorship, and performance monitoring in line with HRD guidelines.
- Identify opportunities for automation, system enhancement, and business process reengineering.
- Maintain the departmental risk register, ensuring up-to-date documentation of risks and mitigation measures.
- Review legislative and regulatory changes to ensure departmental compliance with updated requirements.
- Serve as custodian of departmental policies and oversee regular updates in accordance with CBK policy.
- Participate in procurement, evaluation, inspection, and acceptance committees as required.
- Support the enhancement of ERP functionalities and ensure system controls are embedded in processes.
- Perform other duties or assignments consistent with departmental objectives and operational needs.
4. RISK AND COMPLIANCE ANALYST 1 – BUSINESS ANALYST 1
(Internal Audit & Risk Department)
Job Purpose
The Risk and Compliance Analyst 1 supports the implementation of risk management, compliance monitoring, and business continuity initiatives within the Internal Audit and Risk Department. The position contributes to strengthening internal controls, ensuring adherence to risk management frameworks, and fostering compliance awareness across the Bank.
Detailed Job Description
- Support day-to-day coordination of risk and compliance activities within departments and business units.
- Assist in the rollout of risk management and business continuity awareness campaigns across CBK.
- Conduct periodic risk reviews and assessments to identify potential exposures and recommend mitigating actions.
- Participate in the preparation and review of business impact analyses (BIA) and business continuity plans (BCPs).
- Gather and consolidate reports from different departments to ensure proper documentation of risk and compliance data.
- Carry out analytical reviews and prepare reports for management decision-making.
- Support monitoring of departmental compliance with policies, laws, and regulations.
- Assist in scenario-testing, tabletop exercises, and operational drills for business continuity readiness.
- Maintain records of incidents, test results, and performance indicators for risk and compliance functions.
- Coordinate with departments to follow up on action plans and ensure closure of identified compliance gaps.
- Support development and updating of compliance frameworks, procedures, and manuals.
- Facilitate reporting of risk and compliance performance metrics for senior management and external oversight bodies.
- Ensure strict observance of CBK policies, codes of conduct, and ethical standards in all risk management activities.
- Participate in team projects, departmental planning sessions, and continuous improvement initiatives.
- Perform other assignments in line with the objectives of the Internal Audit & Risk Department.
Application Guidelines
Interested and qualified candidates are encouraged to apply for their preferred positions through the official Central Bank of Kenya online careers portal. Applicants should ensure that they provide accurate personal information and attach all required supporting documents, including an updated curriculum vitae and copies of relevant certificates.
The recruitment process is strictly merit-based. The Central Bank of Kenya does not charge any fee at any stage of the recruitment or selection process. Any form of canvassing will lead to automatic disqualification.
Only shortlisted candidates will be contacted.
Applications must be submitted before the indicated deadline as specified on the CBK careers platform.
The Central Bank of Kenya is an equal opportunity employer committed to diversity, inclusion, and integrity in public service. Qualified professionals are encouraged to apply for the positions of Cyber Risk Analyst, Digital Forensics Analyst, Senior Business Analyst (Monitoring and Compliance), and Risk and Compliance Analyst 1.
