Manager Information Security Assurance

1. Develop, implement, and manage a robust information security assurance program that aligns with industry best practices and regulatory requirements
2. Conduct regular assessments to identify vulnerabilities, threats, and risks to the Bank’s information assets and recommend risk mitigation strategies. Plan, coordinate, and execute internal and external cyber security audits and assessments
3. Ensure compliance with relevant laws, regulations, and standards (e.g., DPPA, PCI-DSS, NIST, ISO 27001), and monitor changes in regulations to align the cyber security assurance program accordingly
4. Assess and manage the security posture of third-party vendors, ensuring that vendors comply with the Bank’s security policies and standards.
5. Design and supervise implementation of compliance assessments against set ICT and information security policies, procedures and standards
6. Develop and deliver security awareness training programs to educate employees about security risks and best practices
7. Provide periodic reports on the state of the Bank’s information security assurance to Senior Management, clearly communicating the risks, vulnerabilities, and overall security posture.
8. Manage and mentor a team of cyber security professionals to foster a collaborative and high-performance culture within the team Stay abreast of the latest cyber security trends, technologies, and threats, and continuously improve the Bank’s cyber security assurance processes and tools

Education and Professional Qualifications:

• Bachelor’s degree in computer science, Cyber Security, or a related field.
• Technical certifications in Information System Audit, Security Risk and Governance e.g., CISA, CISSP, CISM are required
• Advanced degree in Computer Science, Cyber Security, or a related field, and other technical certifications like ISO 27001 Lead Implementor/ Auditor, CEH, OSCP, CRISC, ECSA is an added advantage.

Required Experience and Competences:

• At least 5 years of experience in Cyber Security, with a focus on security assurance, IT Audit, or IT Advisory/Consulting in a large financial institution or a reputable organization
• Knowledge of cyber security frameworks, standards, and best practices
• Proven experience with security risk assessment methodologies and tools
• Ability to work under pressure and manage multiple priorities simultaneously.
• Proficient in security technologies such as firewalls, IDS/IPS, SIEM, DLP, and vulnerability management tools.

Required Skills:

• Excellent analytical and critical thinking skills
• Strong leadership and team management skills
• Effective communication skills, with the ability to explain complex security issues to non-technical stakeholders

To apply: