Cyber & Technology Risk Analyst | Cyber & Information Security BU (Based in Mauritius)

At MCB, progress is measured by the difference we make, not simply the numbers we post. As a Cyber & Technology Risk Analyst within the Risk SBU , you will help protect our customers, colleagues and the bank through sound risk management while building a strong foundation for a career in information security and cyber and technology risk. As part of the Cyber and Information Security BU , you will act as a second-level controller, contributing to the assessment and mitigation of information security, technology, cyber and data privacy risks in an increasingly complex threat landscape.

About MCB

MCB is one of Africa’s most significant financial services brands. With almost 200 years of history rooted in Mauritius and a growing footprint spanning Africa, Europe, the Middle East and beyond, we’re a bank built on substance, not just scale. We’ve spent nearly two centuries helping people, businesses and communities grow, and we’re still only getting started. A career here means pride, purpose and real impact. Bring your ambition and your heart. You’ll find opportunity, a team that values you as a person and a high performer, and work that goes well beyond the numbers.

We are looking for a Cyber & Technology Risk Analyst to join our team of professionals within the Cyber and Information Security BU within Risk SBU. Your responsibility will be to evaluate risks and security threats to the Bank's assets, define security and technology risk behaviours and practices, and monitor adherences to the set policies and frameworks to meet business, legal and regulatory requirements.

Job Vacancy: Cyber & Technology Risk Analyst

What you will do:

1. Partner with stakeholders across the Bank to understand business initiatives, assess associated cyber and technology risks, and support risk-informed decision-making.
2. Identify, assess and monitor information security, cyber and technology risks, and help strengthen the Bank’s overall control environment and resilience.
3. Contribute to the development, enhancement and maintenance of information security, cyber and technology risk policies, standards, procedures and guidelines.
4. Monitor key risk indicators, track emerging issues and recommend practical actions to address control gaps or deviations from risk tolerances.
5. Support the secure delivery of business and technology initiatives by embedding cyber and technology risk considerations into projects and change activities.
6. Help maintain the Bank’s readiness to respond to cyber and technology incidents by supporting incident response processes, coordination activities and continuous improvement efforts.
7. Keep abreast of developments in the cyber threat landscape, industry practices, and regulatory expectations, and translate relevant insights into the Bank’s security and risk frameworks.
8. Work closely with internal teams, including technical and offensive security stakeholders, to track findings, monitor remediation actions and improve the Bank’s security posture.
9. Contribute to cyber security awareness and risk culture initiatives to promote appropriate security behaviours across the organisation.

To succeed, you will be required to demonstrate the following competencies:

1. Strong analytical and problem-solving skills, with the ability to interpret complex information, assess cyber and technology risks, and form sound judgements.
2. Clear written and verbal communication skills, with the ability to explain technical or risk-related matters to different audiences in a concise and effective way.
3. Good planning and organisational skills, with the ability to manage priorities, work independently and deliver high-quality output within deadlines.
4. A proactive and improvement-oriented mindset, with the ability to identify issues, challenge constructively and drive practical solutions.
5. Curiosity and adaptability, with a genuine interest in emerging cyber threats, evolving technologies and changing regulatory expectations.

We are looking for candidates who have at least:

Either

1. A Bachelor’s degree in Information Technology or Cyber/Information Security or an equivalent field of study;
2. 5 years' working experience in information technology/cyber risk management.

Or

1. 8 years' working experience in information technology/cyber risk management.

And

Holding Information Security, Cyber Security and/or Technology Risk related certifications constitutes an advantage.

In addition, demonstrated proficiency in the following is required:

1. Data analysis and reporting, including the ability to develop dashboards, metrics and insights using Power BI or similar analytics tools.
2. Microsoft Office applications, particularly Excel, Word and PowerPoint.
3. Core IT and technology domains, including operating systems, virtualisation, networking, databases and application environments.
4. Common operating systems and platforms such as Windows, Linux and enterprise infrastructure environments.
5. Databases and related technologies, including Microsoft SQL Server, Oracle or similar enterprise database platforms.
6. Network fundamentals, communication protocols and security-relevant infrastructure concepts.

A combination of both qualifications & experience will be considered.

Should this opportunity match your career aspirations, skills and competencies, click on ‘Apply’ to complete your online application.

Please ensure all required information is accurately entered in relevant sections. Any incomplete application will not be considered. Kindly attach a complete CV when applying.

As part of the recruitment process, candidates will be required to provide a valid Certificate of Character of less than 3 months and two professional references.

The deadline for submission of application is 02 November 2026 .

Management reserves the right not to appoint anyone following this advert.