Develops policy, framework, securitybaselines and procedures for the information / Cybersecurity governance and riskmanagement program, including control document reviews, stakeholderreview / sign-
off and post-approval communication.
Plan and coordinate independentVulnerability Assessment and Penetration Test (VAPT)
Monitors compliance with security policies,standards, guidelines and procedures
Continuously communicate and ensure staffand third-parties are aware of information and cyber security as it relates totheir roles and / or services
Identify potential threats andvulnerabilities for business processes, associated data and supportingcapabilities to assist in the evaluation of enterprise risk
Coordinate the development and ongoingmaintenance of Information and Cyber security (ICS) policies and procedures
Empower staff bank-wide through periodicallyInformation and cyber security risk awareness, training and publicationsincluding role based and privileged user training
Ensure Information Security andCybersecurity policy, framework and security baselines are enforced and reportexceptions
Develop an awareness program and conducttraining to ensure that stakeholders understand risk and contribute to the riskmanagement process and to promote a risk-aware culture
Develop and communicate security awarenessprogram through difference awareness sources : Newsletters, E-Learning (ComputerBase Training), Facilitator Led training, E-flyers etc.
Education Minimum Education : First Degree in computer science / Engineering
Professional Certifications : ISO27001 LeadImplementer, ISO27032 Cyber Security Lead manager or any CybersecurityProfessional Certifications
Minimum experience 5 years’ experience infacilitating and conducting security awareness and policy development relatedto PCI-
DSS, ISO 27001, and Cybersecurity Framework