Head of Information Security

Role Description

Qualifications

• **Education:**

Bachelor Or Master Graduate

• **Experience:**
• 12-15 years in the Banking Industry
• **Certifications:**
• A minimum of

CISSP, CISA, CISM, CDPSE

Key Responsibilities & Deliverables

• **KPA 1:**

Expected Result

• Information security strategy and departmental objectives are aligned with the bank’s overall strategy, ensuring effective governance, risk reduction, and achievement of security objectives.
• **KPA 2:**

Expected Result

• Information security policies, procedures aligned with regulatory requirements, industry standards and best practices are developed and maintained.
• **KPA 3:**

Expected Result

• Information Security risk assessment of Information Assets to identify internal and external threats; Recommendation of effective remediation measures to minimize related risks.
• **KPA 4:**

Expected Result

• Security controls are monitored and recommendations to address identified gaps are presented to ensure confidentiality, integrity, availability, accountability, and auditability of information systems and data.
• **KPA 5:**

Expected Result

• Effective oversight of security programs including Configuration & Change Management, Threat & Vulnerability Management, ensuring a strong and proactive security posture.
• **KPA 6:**

Expected Result

• Oversee user access rights are managed in accordance with defined security policies, including “Need to Know” and “Need to Do” principles and 4-eye controls.
• **KPA 7:**

Expected Result

• Continuous monitoring of the information security capabilities and maturity through adoption of best practices, security frameworks to ensure effectiveness and regulatory compliance.
• **KPA 8:**

Expected Result