The Chief Information Security
Officer (CISO) is responsible for leading the Bank’s information security and
cybersecurity strategy to ensure the protection of systems, networks, applications,
and sensitive data against internal and external threats. Reporting to the
Chief Risk Officer, the CISO plays a strategic role in establishing and
maintaining a robust information security governance framework aligned with
regulatory, operational, and business objectives.
Key Responsibilities:
- Develop,
implement, and maintain the Bank’s enterprise-wide information security and
cybersecurity strategy, governance framework, policies, standards, and
procedures in alignment with business objectives and regulatory requirements.
- Lead the
identification, assessment, monitoring, and mitigation of information security
and cybersecurity risks across the organization while ensuring effective risk
management practices and compliance with applicable laws, regulations, and
industry standards.
- Oversee
security operations including threat monitoring, vulnerability management,
incident detection, response, investigation, reporting, and remediation to
ensure the protection of the Bank’s systems, networks, applications, and data
assets.
- Collaborate
with IT and business teams to ensure security-by-design principles are
integrated into technology solutions, infrastructure, applications, and
projects, including secure configuration management and implementation of appropriate
security controls.
- Manage and
coordinate cybersecurity audits, penetration testing, vulnerability
assessments, security reviews, and compliance exercises while ensuring timely
remediation of identified gaps and weaknesses.
- Monitor and
evaluate security technologies, tools, and emerging cybersecurity threats, and
recommend enhancements to strengthen the Bank’s cybersecurity posture and
resilience.
- Provide
strategic advice and regular reporting to senior management on cybersecurity
risks, incidents, compliance status, and security initiatives.
- Promote
cybersecurity awareness across the organization through training,
communication, and awareness programs to foster a strong security culture and
employee accountability.
- Build and
maintain effective relationships with regulators, auditors, external
stakeholders, and professional bodies to ensure alignment with industry
developments and regulatory expectations.
- Lead, mentor,
and develop the information security team by promoting continuous learning,
performance excellence, collaboration, and employee engagement.
Prerequisites:
- Bachelor’s degree in information technology, Computer Science, Cybersecurity, Information
Systems, or related discipline.
- Postgraduate
qualification or professional certification in Information Security or Risk
Management is an advantage.
- Minimum 5–10
years of experience in the Banking or Financial Services industry, including at
least 3–5 years in Information Security, IT Risk, or Cybersecurity leadership
roles.
- Proven
experience in developing and implementing information security policies,
frameworks, and security programs.
- Strong
understanding of cybersecurity regulations, data protection requirements, and
industry standards.
- Experience
managing security incidents, vulnerability management, and cybersecurity
operations.
- Familiarity
with security technologies such as firewalls, IDS/IPS, SIEM, endpoint
protection, VPNs, and encryption tools.
Skills:
- Strong
knowledge of information security governance, cybersecurity risk management,
security operations, incident response, vulnerability management, and
regulatory compliance within the banking and financial services sector.
- Good
understanding of cybersecurity frameworks, standards, and best practices
including ISO 27001, NIST, PCI DSS, SWIFT CSP, data protection regulations, and
related regulatory requirements.
- Proficiency in
security technologies and tools such as firewalls, IDS/IPS, SIEM solutions,
endpoint protection, VPNs, encryption technologies, and security monitoring
systems.
- Strong
analytical, problem-solving, and decision-making skills with the ability to
assess complex risks and recommend practical security solutions.
- Excellent
leadership, people management, coaching, and team development capabilities with
the ability to build high-performing teams and promote a strong security
culture.
- Excellent
communication, presentation, stakeholder management, and interpersonal skills
with the ability to engage effectively with senior management, regulators,
auditors, and cross-functional teams.
- Strong
planning, organizational, project management, and time management skills with
the ability to work effectively in a fast-paced and highly regulated
environment.
- High level of
professionalism, integrity, confidentiality, and attention to detail with the
ability to manage sensitive information appropriately.
