Cyber Security Risk Management

About the role

ADCB's Group Risk Management area is responsible for the bank's risk objectives, risk infrastructure and risk culture. This role manages and implements the bank's cyber security and incident response strategy, keeping the bank within its defined risk appetite and protecting its banking infrastructure and systems.

Key responsibilities

• Implement the cyber security and incident response strategy, including vulnerability assessment, monitoring and incident response
• Evaluate technical risk, architecture, feasibility, vendor review and security controls of new systems and infrastructure
• Manage programmes and projects for new information security products, tools and innovations
• Research threat trends and build technical information security frameworks
• Manage the vulnerability management lifecycle and penetration testing
• Implement information security policies, procedures and technical standards
• Develop technology baselines, including encryption standards, intrusion detection and network authentication
• Manage an internal SOC, including advanced malware analysis, forensics and detection of advanced persistent threats
• Design a continuous monitoring strategy and run programmes for automated log collection, correlation and analysis tools
• Advise on audit trails, detect fraud and unauthorised access, and investigate incidents with root cause analysis
• Manage the SIRT and provide technical information for disciplinary, civil and criminal matters
• Review Big Data infrastructure, recommend encryption, role-based access controls and security configurations, and assess Big Data risks
• Manage the team and supervise its activities

Required profile

• At least 8 years of experience in the banking industry or a similar environment, with at least 4 years of related managerial experience
• Bachelor's degree in Computer Science or equivalent
• Certifications such as CISSP, CISA, GIAC or CEH
• Understanding of vulnerabilities in operating systems, databases and major applications
• Strong awareness of application security requirements and techniques

Required skills

• Information security, risk and vulnerability assessment, data classification, ISO 27001 and PCI-DSS
• Firewalls, network components, protocols, IPS, antivirus and web content filtering
• Enterprise security architecture design and vulnerability management
• Risk management techniques applied to security policy enforcement and compliance

What we offer

• Competitive salary and eligibility for a variable pay plan
• Medical insurance, group life and personal accident insurance, paid leave and leave airfare
• Employee preferential rates on loans