Information Security Manager

Description (Public)

The Information Security Manager is a senior officer responsible for overseeing and ensuring the security, integrity and confidentiality of the bank's information systems, leading security strategy and governance and managing security incidents.

Duties, Roles and Responsibilities

Lead development and implementation of the bank's information security strategy and governance framework
Oversee protection of the confidentiality, integrity and availability of information assets
Develop and enforce information security policies, standards and procedures
Manage large-scale security incidents including data breaches and cyber attacks
Monitor cybersecurity threats and assess the bank's risk exposure
Coordinate security audits, assessments and regulatory compliance
Advise management on information security risks and controls
Build staff awareness of security policies and safe practice

Qualifications, Education and Competencies

Qualifications & Experience:

Bachelor's degree in Information Technology, Computer Science, Cybersecurity or a related field; a master's degree is an added advantage
Professional certifications such as CISSP, CISM or CCISO are highly desirable
Minimum 6 to 8 years of experience in information security, risk management or IT governance roles
Proven experience developing and implementing information security strategies and policies in a complex organisation
Demonstrated ability to manage large-scale security incidents including data breaches and cyber attacks
Experience in highly regulated industries such as finance, healthcare or government is a plus
Core banking systems knowledge is desirable

Skills & Competencies:

In-depth understanding of cybersecurity threats, technologies and risk management practices
Strong governance and policy development skills
Excellent communication with senior stakeholders
Analytical and investigative approach to security incidents