JOB CONTENT To protect the bank's digital assets and information systems from cyber threats. To implement and maintain robust cybersecurity measures, identify and mitigate vulnerabilities, and ensure compliance with security regulations. 2. Duties and Responsibilities 1. Operational: 2. Monitor network activity and security systems to identify potential cyber threats and vulnerabilities. 3. Analyze security incidents, investigate their root cause, and recommend appropriate mitigation strategies. 4. Implement and maintain effective security controls, including firewalls, intrusion detection/prevention systems, and data encryption solutions. 5. Configure and / or manage security systems such as firewalls, WAF, VPNs, sandboxes, MAM\MDM, email security, antivirus, antimalware, and IDS/IPS, SIEM/SOAR, remote access, sandboxes, Patch Management, Security of Wireless Controller, solutions. 6. Develop and document security policies and procedures to ensure best practices are followed by all bank personnel. 7. Stay informed of the latest cyber threats and trends, keeping the chief risk officer and IT department updated on evolving risks. 8. Conduct regular security awareness training sessions for employees to educate them on cyber threats and best practices for protecting information. 2 9. Conduct regular vulnerability assessments and penetration testing to identify and address weaknesses in the bank's IT infrastructure. 10. Work with IT teams to prioritize and remediate vulnerabilities in a timely and effective manner. 11. Develop and implement an incident response plan to effectively respond to cyberattacks and minimize potential damage. 12. Lead incident response activities, coordinating with IT teams, legal department, and external authorities (if necessary) to investigate and contain security breaches. 13. Conduct post-incident reviews to identify lessons learned and improve future preparedness. 14. Prepare regular reports on security threats, vulnerabilities, and incident response activities for chief risk officer. 15. Develop and conduct security awareness training programs to educate employees on cybersecurity best practices, including phishing scams, password hygiene, and social engineering tactics. 16. Promote a culture of security awareness within the bank by encouraging employees to report suspicious activity. 17. Perform any other relevant task assigned from time to time by the manager / management. KEY INTERACTIONS 1. Internal – All internal department and branches – As per operational activities 2. External – Vendors, Service Providers, Consultants – As part of operational activities 3. Level of external interaction – This position requires a low level of external interaction MINIMUM EDUCATION, QUALIFICATIONS & SKILLS Education: – Bachelor's degree in relevant discipline. Preferred: Master's degree in relevant discipline. Experience: – 3 to 5 years of experience in relevant discipline. Special Skills & Knowledge: – Strong understanding of cyber threats, vulnerabilities, and security best practices. – Experience with security tools and technologies (firewalls, IDS/IPS, data encryption). – Excellent analytical and problem-solving skills. – Strong communication and interpersonal skills to collaborate effectively with IT teams, management, and other departments. – Ability to work independently and as part of a team. – Excellent written and verbal communication skills. Business Understanding: – This position requires a medium level of business understanding
Subscribe for free, choose your specializations, and we'll send matching jobs directly to your WhatsApp
Subscribe via WhatsApp, free