Job Description
We are seeking a highly skilled and motivated Information Security Lead to join our team. The successful candidate will be responsible for ensuring the security and integrity of the bank's infrastructure. This role involves identifying vulnerabilities, implementing security measures, and responding to security incidents. The ideal candidate will have a strong background in cybersecurity, excellent problem-solving skills, and the ability to work in a fast-paced environment.
Key Responsibilities
- Security Monitoring and Incident Response
- Monitor network traffic and systems for security breaches or intrusions.
- Respond to and investigate security incidents, performing root cause analysis and implementing corrective measures.
- Develop and maintain incident response protocols and procedures.
Vulnerability Management - Conduct regular vulnerability assessments and penetration testing on infrastructure components.
- Collaborate with IT teams to remediate identified vulnerabilities.
- Keep abreast of the latest security vulnerabilities and threats.
Security Architecture and Implementation - Design and implement security solutions to protect infrastructure from cyber threats.
- Develop and enforce security policies, standards, and best practices.
- Ensure secure configuration and hardening of network devices, servers, and applications.
Compliance and Risk Management - Ensure compliance with industry standards and regulations (e.g., ISO 27001, PCI-DSS, NIST, GDPR, etc).
- Perform risk assessments and develop mitigation strategies.
- Maintain documentation of security policies, procedures, and incidents.
Collaboration and Communication - Work closely with IT, DevOps, and other departments to integrate security into infrastructure projects.
- Provide security training and awareness programs for employees.
- Communicate effectively with management and stakeholders regarding security issues and initiatives.