Cyber Security Risk Management Opportunities

Lead cybersecurity risk activities that protect banking technology, information assets and customer data. The role combines security risk assessment, technical assurance, incident response, vulnerability management and oversight of security tools and controls. The successful candidate will assess technology changes and security architecture, investigate incidents, coordinate response and remediation, and help maintain effective monitoring across critical systems. The position also involves leading specialists and ensuring that security practices remain aligned with internal standards, recognised frameworks and banking requirements.

Key Responsibilities

• Develop and maintain cybersecurity risk and incident-response strategies, controls and operational procedures.
• Review technology architecture, systems and proposed changes to identify security weaknesses and recommend appropriate safeguards.
• Oversee vulnerability assessments, penetration testing, threat research and remediation tracking.
• Monitor security operations, including SOC activity, sensitive-data alerts, phishing, malware and suspicious behaviour.
• Coordinate security incident response, investigation, forensic support and remediation through the appropriate response teams.
• Support implementation of encryption, intrusion detection, network authentication and other technical security measures.
• Review security products and tools and help improve monitoring, logging, access controls and data protection.
• Lead team activity, maintain audit evidence and support investigations involving security incidents or suspected fraud.

Requirements and Experience

• At least eight years of relevant experience in banking or a comparable environment, including at least four years in a management capacity.
• Strong experience in information security risk, vulnerability assessment, data classification and security control implementation.
• Knowledge of ISO 27001 and PCI DSS is important.
• Practical understanding of firewalls, network protocols, intrusion prevention, antivirus, web filtering and database platforms is required.
• Relevant professional certifications such as CISSP, CISA, GIAC or CEH are expected or advantageous.

Qualifications

• A bachelor’s degree in Computer Science or an equivalent discipline is required.

Skills and Competencies

• Cybersecurity risk and technical control assessment.
• Security architecture, vulnerability testing and threat mitigation.
• SOC monitoring, incident management and digital forensics.
• Leadership, investigation, documentation and stakeholder coordination.