Assistant Manager Information Security Systems

The Assistant Manager Information Security Systems will lead and coordinate the bank's IT security initiatives. This includes actively monitoring computer networks and the entire ICT infrastructure to defend against cyber-attacks, security threats, and unauthorized access. The primary goal is to safeguard the bank's data and knowledge base, ensuring the integrity, availability, confidentiality, and authenticity of all its information assets.

1. Review security reports, investigate incidents, and implement necessary remedial actions.
2. Ensure the Bank complies with local regulations, including encryption regulations and privacy laws.
3. Enforce adherence to the Bank’s ICT Security policy.
4. Verify that changes made to ICT systems strictly follow the change management policy and do not affect service availability.
5. Oversee the development, updating, communication, and publication of the Information Security Policy and other operational security policies.
6. Review the Bank’s ICT security controls and strategies, ensuring procedures for their operation and maintenance are in place.
7. Maintain the Confidentiality, Integrity, and Availability of services at levels agreed upon in Operation Level Agreements (OLAs).
8. Ensure all access to services by external partners and suppliers is subject to contractual agreements (e.g., non-disclosure agreements) and closely monitored.
9. Assess the impact of all access changes on security aspects, including information security policy and controls.
10. Coordinate ICT security risk analysis and risk management in conjunction with Risk and ICT Service Continuity Management functions.
11. Oversee the Bank’s ICT security awareness program to ensure employees understand risks, threats, their responsibilities, and how to comply with policies.
12. Manage and coordinate the development and testing of the Bank’s Disaster Recovery Plans (DRPs).
13. Oversee the design, development, and delivery of enterprise-level identity and access management solutions.
14. Ensure a robust and scalable strategy for Identity and Access Management services to support employees, contractors, partners, and vendors.
15. Interact with other departments to ensure staff have the correct level of access to systems and applications.
16. Provide security services that complement the information technology architecture and integrate with the business global architecture.
17. Oversee the analysis, design, building, testing, and deployment activities related to IAM components.
18. Act as a trusted security architecture advisor, providing strategic direction for Identity Lifecycle management tools and technologies and enterprise security objectives.
19. Review solutions and recommendations for issues caused by process challenges, emerging threats, and technology changes.
20. Manage and support security infrastructure systems and devices, including Access Control Systems, Patch Management Systems, Web Application Firewalls, Database Security, and Authentication Systems.
21. Oversee the development and implementation of an ICT Risk Management Framework and Security Control Framework.
22. Review and recommend security controls and configurations on systems, databases, and network infrastructure.
23. Perform hardening of various operating, application, and database systems.
24. Design and implement ICT security architecture, proactively patching and implementing secure configurations and protocols on ICT systems.
25. Provide security guidance during technology projects, system deployments, upgrades, and changes.
26. Enforce the Bank’s Information Security policies on ICT systems and equipment, and develop security solutions to mitigate identified vulnerabilities.
27. Liaise with various stakeholders within the Bank and external partners to enforce ICT security standards for ICT infrastructure.

1. At least twelve (12) years of relevant work experience in the Public service or Private sector, with a minimum of three (3) years in a supervisory role.
2. Master’s Degree in Information Technology, Computer Science, Business IT, Software Engineering, ICT Project Management, Computer Engineering, or an equivalent qualification from a recognized institution.
3. Bachelor’s Degree in Information Technology, Computer Science, Business IT, Software Engineering, ICT Project Management, Computer Engineering, or an equivalent qualification from a recognized institution.
4. Certification in CCNA/CCNP/CISA/CISM/CISSP or other equivalent security certifications/qualifications from a recognized institution.
5. Completion of a management course lasting not less than four (4) weeks from a recognized institution.
6. Knowledge of current trends in ICT within the banking and financial services sectors.
7. Good understanding of business support services and their related technologies.
8. Experience in managing and administering systems and infrastructure, as well as managing all business support software and ICT/communications infrastructure.
9. In-depth knowledge of server, client, mobile operating systems, and RDBMS, with demonstrated understanding of security architecting for information systems.
10. Profound knowledge of tools used to secure and test the security of information systems.
11. Demonstrated knowledge of threats and attack vectors, as well as incident response and management.
12. Strong experience in vulnerability management.
13. Solid knowledge of security standards, ICT security regulatory, and compliance regulations and standards.
14. Familiarity with various programming and scripting languages (e.g., .Net, Java, Perl, C#).
15. Knowledge of and practical experience with various Internet protocols (e.g., DNS, TCP/IP, SMTP, HTTP, SSL).
16. Strong understanding and knowledge of ICT risk assessment, risk procedures, security assessment, vulnerability management, and penetration testing.
17. Possess high levels of integrity, ethical standards, and professionalism.
18. Fulfilled the requirements of Chapter Six of the Constitution.