Information Security & Risk Careers: AFC holdings Cyber Risk Analyst Vacancy
Join our WhatsApp Group
AFC Commercial Bank Cyber Risk Analyst Position Overview
- Hiring Institution: AFC Commercial Bank (A Subsidiary of AFC Holdings)
- Position Title: Cyber Risk Analyst
- Reporting Structure: Reports directly to the Information Security and Compliance Manager
- Functional Scope: Network traffic monitoring, vulnerability assessments, incident response, and threat modeling
- Location: Harare, Zimbabwe
- Application Closing Window: Tuesday, 9 June 2026
AFC Commercial Bank, a commercial banking institution operating under the diversified financial banner of AFC Holdings, is expanding its corporate defense infrastructure. Applications are invited from highly technical, security-minded professionals to fill the immediate vacancy of an AFC Holdings cyber risk analyst. Based at the bank’s technology headquarters in Harare, this professional station is placed directly within the Information Security and Compliance department to protect the bank’s digital financial channels.
The selected AFC Holdings cyber risk analyst will take full operational responsibility for monitoring corporate network traffic, tracking security incidents, and installing preventative defensive controls. The post demands an analytical specialist capable of conducting deep-dive vulnerability assessments and running quality assurance reviews on core banking software. These actions ensure that critical retail and corporate financial services remain fully operational and completely insulated from cyber threats.
Key Responsibilities and Performance Deliverables
The everyday workspace for the successful AFC Holdings cyber risk analyst combines live intrusion tracking, system vulnerability auditing, and incident report architecture.
1. Incident Analysis, Quality Assurance & Vulnerability Screening
- Report Auditing: The AFC Holdings cyber risk analyst will focus on Reviewing and analyzing internal audit findings, digital fraud logs, and operational loss incident reports to identify recurring systemic weaknesses.
- Vulnerability Quality Assurance: The AFC Holdings cyber risk analyst will focus on Conducting rigorous quality assurance tests on internal software applications and hardware infrastructure to spot hidden security flaws.
- Intrusion Monitoring: The AFC Holdings cyber risk analyst will focus on Monitoring banking software and network infrastructure for internal and external intrusions, unauthorized data access, and active hacking attempts.
2. Real-Time Incident Response & Security Strategy Formulation
- Security Plan Development: The AFC Holdings cyber risk analyst will focus on Developing and updating comprehensive cyber security blueprints for software environments, localized data networks, corporate data centers, and physical banking hardware.
- Real-Time Remediation: The AFC Holdings cyber risk analyst will focus on Investigating and responding to active security incidents in real-time, executing corrective actions to guarantee minimal disruption to digital banking channels.
- Incident Documentation: The AFC Holdings cyber risk analyst will focus on Compiling detailed, highly structured post-incident reports that document breach methodologies and technical containment steps for corporate leadership.
3. Threat Research, Business Continuity & Risk Modeling
- Threat Intelligence Research: The AFC Holdings cyber risk analyst will focus on Researching emerging local and international cyber risks, monitoring global ransomware vectors, and submitting predictive threat briefs to the Information Security and Compliance Manager.
- Continuity Underwriting: The AFC Holdings cyber risk analyst will focus on Assessing the technical validity of current Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP), making strategic data-protection recommendations.
- Quantitative Modeling: The AFC Holdings cyber risk analyst will focus on Participating in advanced threat modeling projects and quantitative risk assignments to determine the financial impact of potential systemic data breaches.
Qualifications, Experience & Technical Requirements
The AFC Holdings selection committee targets a self-directed technology professional who combines practical penetration testing skills with strong data-capturing ethics.
| Evaluation Category | Required Corporate Baselines for the AFC Holdings Cyber Risk Analyst |
| Academic Foundation | Formal Bachelor’s Degree in Computer Science, Information Systems, or an equivalent technical qualification. |
| Professional Advantage | Possession of a recognized information security certification such as CISM, CISSP, or CEH (Certified Ethical Hacker) is a distinct asset. |
| Industry Longevity | Minimum of one to three (1–3) years of progressive experience operating directly within Technology Services Cyber Security, Risk Management, or related environments. |
| Technical Toolkit | Proven capability to develop and run comprehensive vulnerability assessments, penetration testing matrices, and cyber security audits. |
| Analytical Arsenal | Prior engagement in data-driven modelling or quantitative risk projects is considered an added advantage by the panel. |
| Core Competencies | Deep knowledge of network traffic sniffing tools, firewall configurations, secure coding practices, and structured technical report writing. |
ALSO READ: Apply for the 48-month Mutapa Gold Resources apprenticeship program at Shamva.
Application Guidelines and Submission Protocol
AFC Commercial Bank utilizes a streamlined, electronic talent evaluation loop. Security specialists looking to secure this AFC Holdings cyber risk analyst chair must route their application folders directly to the central human capital database.
Required Application Dossier Components:
- A tailored formal Cover Letter explicitly outlining your intrusion monitoring successes, penetration testing competencies, and experience handling active security breaches.
- An updated, comprehensive Curriculum Vitae (CV) tracking your employment history, clear software tool proficiencies, security certs, and verifiable professional references.
- Certified clear digital copies of your computer science degree, professional security certifications, and national identification document.
Direct Submission E-mail Address: Forward your complete application package via email directly to the central human resources repository at:
Mandatory Email Subject Configuration: To pass primary automated applicant tracking system inbox rules, you must state your targeted role precisely within your email header line:
Cyber Risk Analyst Application
Your digital application dossier must be successfully recorded in the centralized corporate inbox no later than Tuesday, 9 June 2026.
Corporate Vetting Advisory: AFC Holdings is an equal opportunity employer, and qualified female technology risk leaders are highly encouraged to submit applications. Incomplete profiles, dossiers lacking direct network monitoring experience, or entries uploaded past the official 2026 closing date will be system-archived without review. Only short-listed information security finalists will receive direct communication from the HR desk to schedule technical sandbox tests, diagnostic simulations, and panel interviews.
Disclaimer: The Business Pulse shares verified opportunities from trusted sources. We are not a recruiting agency and do not request any payment for applications.
Leave a Reply