Responsible for developing, implementing, and managing the bank’s information security strategies and programs to protect our digital assets, ensure compliance with industry regulations, and safeguard sensitive data against cyber threats. This role requires extensive knowledge of IT security practices, strong leadership skills, and the ability to respond effectively to security incidents.
Key Responsibilities:
• Develop and implement comprehensive IT security strategies, policies, and procedures to protect the bank’s information assets.
• Ensure security policies are aligned with industry standards, regulatory requirements, and best practices.
• Conduct regular reviews and updates of security policies to address emerging threats and changing business needs.
• Identify, assess, and manage IT security risks across the organization.
• Conduct regular security audits, vulnerability assessments, and penetration testing.
• Ensure compliance with regulatory requirements such as PCI DSS, and other relevant standards.
• Coordinate with internal and external auditors to facilitate security assessments and audits.
• Develop and maintain an incident response plan to address security breaches and cyber threats.
• Lead the response to security incidents, including investigation, containment, mitigation, and recovery.
• Conduct post-incident analysis to identify root causes and implement corrective actions.
• Develop and deliver security awareness training programs for employees to promote a culture of security.
• Ensure staff are educated on security policies, procedures, and best practices.
• Stay informed about the latest security trends, threats, and technologies, and disseminate relevant information to the team.
• Oversee the selection, implementation, and management of security technologies and solutions, including firewalls, intrusion detection systems, encryption, and endpoint protection.
• Ensure security tools are properly configured, maintained, and monitored.
• Work with other IT teams to integrate security controls into system development and operational processes.
• Lead and manage the IT security team, providing guidance, mentorship, and performance management.
• Collaborate with other IT and business leaders to ensure security is integrated into all aspects of the organization’s operations.
• Manage the security budget and resources effectively.
Qualifications and Experience
• Deep understanding of IT security frameworks, standards, and best practices.
• Knowledge of network security, application security, cloud security, and data protection.
• Experience with security technologies such as firewalls, IDS/IPS, SIEM, DLP, and encryption.
• Strong leadership and team management skills.
• Excellent problem-solving and analytical abilities.
• Strong communication and interpersonal skills, with the ability to interact effectively with technical and nontechnical stakeholders.