Information Security & Governance (SO – SPO)

SHIMANTO BANK PLC

SHIMANTO BANK PLC

Follow

More jobs from this company

Summary

• Vacancy: —
• Age: at most 38 years
• Location: Dhaka
• Salary: Negotiable
• Experience: 6 to 10 years
• Published: 10 Nov 2024

Requirements

Education

• Minimum B.Sc. in CSE/EEE or IT-related fields from any reputed university.

• Professional Certification regarding information security is preferred.

• 3rd division or 3rd class in any exam are discouraged to apply.

Experience

• 6 to 10 years
• The applicants should have experience in the following business area(s):
  Banks

Additional Requirements

• Age at most 38 years

• Both males and females are allowed to apply.

• Candidates having experience in SIEM, Firewall, WAF, PAM, ISO 27001 & PCI DSS will get preference.

• Candidates having experience in offensive security will get preference.

• Requirements may be relaxed for relevant and experienced candidates.

Responsibilities & Context

• Conduct periodic ICT risk assessment to identify the ICT security risks and exposures associated with bank’s ICT related assets (process and system) and support the mitigation process of identified ICT risk in collaboration with concern team.

• Develop and maintain ICT security policies and related processes & procedures for the protection of ICT assets.

• Define ICT security requirements and measure compliance, based on Bank’s policies/procedures, applicable laws, regulations, and best practices.

• Collaborate with related divisions/branches to obtain ICT security requirements as per the business plan to develop Bank’s ICT security strategy and architecture.

• Perform periodic exercises for checking the compliance of ICT security policies and procedures by divisions/branches/employees and assist in achieving and maintaining full compliance with the policies and procedures.

• Consult with end users and divisions/branches to investigate ICT security issues and evaluate for risk mitigation.

• Support IT team in recovering from disruptive and destructive ICT/Cyber security events.

• Increase user awareness on ICT/Cyber security through trainings and communications.

• Monitor ongoing compliance with ICT security policies and related standards.

• Manage the timely resolution of all ICT security issues.

• Provide support to Internal/External Audit Team with regard to ICT security reviews/audits.

• Other tasks and responsibilities as and when assigned by the management of the Bank.

Skills & Expertise

Information Security

Compensation & Other Benefits

• Negotiable

• Other benefits are as per Bank’s Human Resources Policy

Workplace

Work at office

Employment Status

Full Time

Job Location

Dhaka

Source link