Senior IT Security and Governance Officer job at Tropical Bank | Apply Now

Develop and maintain ICT governance frameworks and processes to manage risks effectively and ensure compliance with internal policies and regulatory requirements.

Develop and implement comprehensive cybersecurity strategies, policies, and procedures to protect the bank’s ICT infrastructure, systems, and data assets.

Develop and maintain incident response plans and procedures to ensure a swift and organized response to security incidents.

Carry out daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems, and critical processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.

Establish and enforce ICT security policies, procedures, and controls to protect the bank’s information assets and customer data.

Monitor compliance with regulatory requirements and industry standards related to ICT security and data privacy.

Create and manage information security and risk management awareness training programs for all employees, contractors, and approved system users.

Participate in security incident and event management to protect ICT assets, including intellectual property, regulated data, and the Bank’s reputation.

Monitor the external threat environment for emerging threats and advise relevant stakeholders on the appropriate courses of action.

Follow up the consistent application of policies and standards across all technology projects, systems, and services, including, but not limited to, privacy, risk management, compliance, and business continuity management.

Ensure that ICT security is considered in evaluating, selecting, installing, and configuring applications.

Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.

Research, evaluate, design, test, recommend, or plan the implementation of new or updated information security hardware or software.

Ensure that substantive Disaster Recovery and Business Continuity plans are regularly tested and updated.

Manage security technologies such as firewalls, intrusion detection systems (IDS), antivirus software, and encryption tools to ensure effective protection against cyber threats