Cyber & Technology Risk Analyst

About the role

MCB is looking for a Cyber & Technology Risk Analyst to join its Cyber and Information Security Business Unit within the Risk SBU. The analyst acts as a second-level controller, assessing and mitigating information security, technology, cyber and data privacy risks in an increasingly complex threat landscape, and helps protect the bank's customers, colleagues and the bank.

Key responsibilities

• Partner with stakeholders across the bank to understand business initiatives, assess their cyber and technology risks and support risk-informed decisions.
• Identify, assess and monitor information security, cyber and technology risks, and strengthen the bank's control environment and resilience.
• Contribute to developing, enhancing and maintaining risk policies, standards, procedures and guidelines.
• Monitor key risk indicators, track emerging issues and recommend actions to close control gaps or deviations from risk tolerances.
• Embed cyber and technology risk considerations into projects and change activities, and support incident response and continuous improvement.
• Stay up to date on threats, industry practice and regulations and translate insights into the bank's frameworks.
• Work with technical and offensive security teams to track findings and remediation, and contribute to security awareness initiatives.

Required profile

• Bachelor's degree in Information Technology, Cyber/Information Security or an equivalent field, OR 5 years of experience in IT/cyber risk management, OR 8 years of experience in IT/cyber risk management.
• Certifications in information security, cyber security or technology risk are an advantage.
• A combination of qualification and experience is considered.

Required skills

• Data analysis and reporting, including dashboards and metrics with Power BI or similar tools.
• Microsoft Office, especially Excel, Word and PowerPoint.
• Core IT domains: operating systems, virtualisation, networking, databases and application environments.
• Windows, Linux and enterprise infrastructure platforms.
• Databases such as Microsoft SQL Server or Oracle.
• Network fundamentals, protocols and security-relevant infrastructure concepts.

Applicants must submit a complete online application with a CV, a certificate of character issued within three months and two professional references. Applications close on 02 November 2026.