Information Security Manager

The person will be responsible for Information security governance, conducting security assessments, ensuring compliance with international security standards and internal policies and directives.

Job Dimensions:

• IS Security Assessment / Security Liaison
• Operational Support
• Group Role

Job Requirements:

Academic: Bachelor's degree or Masters degree in Computer Science/IT/B.E or related fields

Professional: CISA / CISM / CISSP / CEH / ISO 27001 LI

Formal Training: Information security related trainings are preferred

Practical Experience: At least 10 years of information security governance, Security assessment & Compliance.

Experience of Banking or Financial institution highly preferred.

Job Competencies Functional:

• Expertise to understand the Bank's technical and business environment.
• In-depth knowledge of databases, operating systems, network, user management, encryption & cryptography, change management, backup management and security technologies.
• Knowledge of ISO 27000 series, OWASP, PCI DSS, SWIFT CSCF etc.

Job Context:

The position requires collaboration with different stakeholders to implement effective Information Security Policies, frameworks and ensure compliance with regulations and industry standards that support business growth and strategic initiatives keeping in view the Bank's environment.

Job Accountabilities:

• Manage, develop and maintain cyber and information security policies, directives, standard procedures and guidelines.
• Perform hands-on gaps or security assessments to identify significant information security gaps.
• Analyse vulnerability/threat pairs across all platforms and recommend controls.
• Meet business leaders and drive security risk to acceptable levels throughout Group.
• Ensure proper treatment of reported information security risks.
• Verify implementation of security risk response measures.
• Coordinate, monitor, and report IS risk remediation activities.
• Develop and maintain information security risk profiles.
• Monitor compliance with Group policies and procedures.
• Manage ISO 27001 Information Security Management System and recertification.
• Recommend policy enhancements based on evolving threats.
• Build and maintain knowledge repository and coordinate third party assessments.
• Conduct periodic compliance reviews.
• Special Projects: Ad-hoc projects assigned by line manager.