Officer/Associate Manager, System Security and Risks, Information Security

Job Description

Title: Officer/Associate Manager, System Security and Risks, Information Security

Company Name: BRAC Bank PLC

Vacancy: --

Age: Na

Job Location: Anywhere in Bangladesh

Salary: --

Experience:

• At least 2 years
• The applicants should have experience in the following business area(s): Banks

Minimum graduation in information security, Cyber Security, Computer Science, or a related field from a UGC-approved university with a satisfactory academic track record.

• At least 2 years
• The applicants should have experience in the following business area(s): Banks

• Candidates are expected to hold one or more industry-recognized certifications such as: CEH / CPEH, CHFI, GCIA / GCIH, CPT / LPT, CISSO / CCISO, CISA, ISO 27001 Lead Implementer/Auditor.

• Minimum 2 years of direct Information Security experience, or Minimum 3 years of Information Systems/Infrastructure experience with strong exposure to network and infrastructure security.

• Experience in implementing and managing security programs and controls.

Strong understanding of: Security methodologies and frameworks, technical security solutions, Security policies, standards, and compliance requirements, Security assessments and control effectiveness measurement, and

Familiarity with: NIST, OWASP, PCI-DSS, ISO 27001, COBIT

• Ability to analyze data and drive innovation. Handle multiple projects simultaneously and deliver results. Strong problem-solving and decision-making capabilities.

• Strong written and verbal communication skills. Ability to prepare reports, presentations, and documentation for different audiences.

• Self-propelled, proficient in customer-centricity, team player, and capable of meeting deadlines.

BRAC Bank PLC is the first and only Bangladeshi bank to feature in Forbes’ World’s 500 Top Performing Banks. The bank is shaping the future of banking in Bangladesh through trust, innovation, and inclusion. As a values-based financial institution, the bank empowers customers and businesses with responsible financial solutions while upholding the highest standards of compliance, governance, and transparency. For professionals, the bank offers a platform where performance, integrity, and innovation thrive.

The bank is seeking a qualified and purpose-driven professional for the following position within its Risk Management Division in the mentioned position:

Grade: OG-II – SO

Key Responsibilities:

• Contribute to the organization`s information security strategy by developing and maintaining security policies, standards, procedures, awareness programs, risk assessments, and incident response capabilities.

• Design and review secure cybersecurity architectures and provide security recommendations for business and technology initiatives.

• Support secure digital transformation programs by evaluating, implementing, and managing next-generation security technologies and solutions.

• Administer and optimize enterprise security solutions, including XDR (Extended Detection and Response), DLP (Data Loss Prevention), Network Behavior Analytics (NBA/NDR), Sandboxing, Email Security Gateway, Mobile Device Management (MDM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA/2FA), Hard Disk Encryption, Vulnerability Management Platforms, SIEM, Threat Intelligence, and Endpoint Security solutions.

• Conduct security assessments, vulnerability assessments, penetration testing (VAPT), configuration reviews, and security compliance reviews to identify and mitigate risks.

• Perform continuous risk assessments, security reviews, and control effectiveness evaluations aligned with industry standards and regulatory requirements.

• Support compliance initiatives related to ISO 27001, NIST, PCI-DSS, OWASP, COBIT, and other applicable security frameworks.

• Manage cybersecurity vendors and third-party service providers, including solution evaluation, implementation oversight, performance monitoring, and risk assessments.

• Stay current with emerging cyber threats, vulnerabilities, attack techniques, and security technologies, and recommend appropriate remediation measures.

• Collaborate with IT, business, and project teams to ensure security requirements are integrated throughout the system and application lifecycle.

• Prepare security reports, dashboards, and management presentations, and perform other cybersecurity-related duties as assigned.