Senior Officer - Information System Security

Minimum 5 years of professional experience in IT Security, Cyber Security, or Information Security Role, preferably within a Bank or Financial Institution (FI).

Must be Certified Ethical Hacker (CEH) with strong practical knowledge of hacking techniques, vectors, and preventative countermeasures.

ISO/IEC 27001 Lead Implementer or Lead Auditor certification, with a deep understanding of Information Security Management Systems (ISMS) is preferred.

Hands-on experience with firewalls, SIEM tools, IDS/IPS, FIM, endpoint protection, web vulnerability assessment tools, VA/PT tools.

Familiarity with secure network architecture, OS hardening (Linux/Windows), and database security.

Excellent report writing skills.

Should have excellent analytical ability, good interpersonal & communication skills.

Design, implement, and monitor comprehensive security measures to protect the organization’s networks, systems, and data from cyber threats and unauthorized access.

Conduct regular VA/PT or Extend support to third party for conducting VA/PT for web applications/ network/ end points and lead the response to security breaches or cyber incidents.

Ensure all IT infrastructure and operations align with Bangladesh Bank ICT Policy and Cybersecurity Framework

Coordinate, facilitate, and lead both internal and external IT audits. Address audit findings by implementing corrective actions to mitigate identified risks