Job Summary

The purpose of this role is to develop and implement information security, risk management, regulatory and governance policies and procedures. In this role you will initiate, facilitate, and promote activities to create information security awareness within the organization.

Key Accountabilities

• Establishes policies and guidelines to adhere to security standards
• Develop and strengthen security awareness programs
• Actively participate in developing security governance framework materials (policies, controls, standards) to drive consistent security risk treatment across the enterprise.
• Deliver and report key metrics to provide stakeholders situational awareness regarding enterprise control and standards adoption
• Lead annual certification ISO27001 and PCI-DSS
• Ensure alignment with information security regulatory and legal requirements 
• Information security risk management 

Key Competencies

• Ability to work in a team and with stakeholders from across the bank
• Ability to communicate information security requirements and risk effectively
• Ability to analyse policies and regulations in detail to determine gaps, identify linkages and develop remediation strategies.

Skills

Experience

Required Qualifications:

• Preferred degree in Information Technology, cyber security or equivalent

Required Experience:

• 3-5 years relevant experience
• Implementing PCI-DSS and ISO27001 controls and certification

Competencies

• Adaptability/Flexibility
• Computer Skills
• Creativity/Innovation
• Decision Making/Judgment
• Dependability
• Initiative
• Integrity/Ethics
• Internet Savvy
• Managing Technology
• Personal Organization
• Planning
• Problem Solving/Analysis
• Process PRIME postings manually
• Process transaction vouchers received from various Departments (internal)
• Productivity
• Quality
• Receipt and verify the posting and payroll documents received
• Results Focus
• Self Development
• Sense of Urgency
• Strategic Thinking/Management
• Summary
• Technical Skills
• Vision and Values

Skills

• Ability to interact with internal and external stakeholders
• Ability to work under pressure
• Auditing
• Data Discovery
• Data Lifecycle Management
• Data Loss Prevention Programs
• Data Protection Concepts
• Data Science
• Data Security
• Risk Management
• Security Architecture
• Security Best Practices
• Security Engineering
• Security Governance
• Security Management

Education

• Bachelor’s degree in Computer Science or equivalent