Information Security & Governance (SO - SPO)

Job Description

Title: Information Security & Governance (SO - SPO)

Company Name: SHIMANTO BANK PLC

Vacancy: --

Age: At most 38 years

Job Location: Dhaka

Salary: Negotiable

Experience:

• 6 to 10 years
• The applicants should have experience in the following business area(s): Banks

• Minimum B.Sc. in CSE/EEE or IT-related fields from any reputed university.

• Professional Certification regarding information security is preferred.

• 3rd division or 3rd class in any exam are discouraged to apply.

• 6 to 10 years
• The applicants should have experience in the following business area(s): Banks

• Age At most 38 years

• Both males and females are allowed to apply.

• Candidates having experience in SIEM, Firewall, WAF, PAM, ISO 27001 & PCI DSS will get preference.

• Candidates having experience in offensive security will get preference.

• Requirements may be relaxed for relevant and experienced candidates.

• Conduct periodic ICT risk assessment to identify the ICT security risks and exposures associated with bank`s ICT related assets (process and system) and support the mitigation process of identified ICT risk in collaboration with concern team.

• Develop and maintain ICT security policies and related processes & procedures for the protection of ICT assets.

• Define ICT security requirements and measure compliance, based on Bank`s policies/procedures, applicable laws, regulations, and best practices.

• Collaborate with related divisions/branches to obtain ICT security requirements as per the business plan to develop Bank`s ICT security strategy and architecture.

• Perform periodic exercises for checking the compliance of ICT security policies and procedures by divisions/branches/employees and assist in achieving and maintaining full compliance with the policies and procedures.

• Consult with end users and divisions/branches to investigate ICT security issues and evaluate for risk mitigation.

• Support IT team in recovering from disruptive and destructive ICT/Cyber security events.

• Increase user awareness on ICT/Cyber security through trainings and communications.

• Monitor ongoing compliance with ICT security policies and related standards.

• Manage the timely resolution of all ICT security issues.

• Provide support to Internal/External Audit Team with regard to ICT security reviews/audits.

• Other tasks and responsibilities as and when assigned by the management of the Bank.

• Negotiable

• Other benefits are as per Bank`s Human Resources Policy