Security requirements : specify, allocate, and assign confidentiality,integrity, and availability requirements to development and acquisitionorganizations and assets
Security architecture : Develop and maintain an enterprisesecurity architecture
Secure lifecycle : ensure that security requirements areadequately addressed throughout the development and acquisition lifecycles forall assets
Certification and accreditation : perform certificationand accreditation prior to releasing new systems and software to production
Manages andassess the bank’s security measures, such as firewalls, anti-virus software andpasswords, to identify any weak points that might make information systemsvulnerable to attack.
Coordinatesand prioritize security coverage to ensure that strategically important data,such as commercial information or personal data, receives the highest levels ofprotection.
Manages all activities that serveto provide appropriate access to protectthe customers information and that of all security solutions.
Perform gap analysis based on theunderstanding of current-state and target-state of the Information Securityarchitectures.
Coordinates the selection, design,justification, implementation and operation of information security controlsand management strategies in accordance with regulations.
Ensures that projects arecompliant with the banks Information Security architecture framework and securedevelopment standards.
Coordinate and provide leadership andoversight of information assurance, setting high level strategic and policiesto ensure stakeholder’s confidence, that risk to the integrity of information in storage and transit is managedpragmatically and in a cost-effective manner.
Manage the overall Business Continuity Planningprocess and report results to the Information Security Management team.
Coordinate the execution of vulnerability assessments processes,penetration tests and security audits.
Coordinate the enforcement ofInformation Security standards and policies including the maintenance ofsecurity certifications e.
g. the Payment Card Industry Data Security Solutions(PCIDSS).
Coordinate regular security awarenessworkshops for all Information Security Operation’s employees to ensureconsistently high levels of compliance with regulatory bodies.
Create and maintain Information Securitydocuments, comprising, policies, standards, baselines, guidelines andprocedures.
Establishes, plans, and administers the overall policies andgoals for the information security operations department.
Manage the deployment, monitoring, maintenance,development, upgrade, and support of all Information Security services.
Develop standard operating procedures for InformationSecurity best practices and service provision.
Minimum Education : First Degree in computer science / Engineering, Higher Degrees
At least three Relevant Professional Certifications asappropriate
Minimum experience Ten (10) years relevant working experienceand 5 years working experience at supervisory level