Key Responsibilities:

Conduct cyber risk assessments and perform independent threat and vulnerability assessments and penetration tests on the bank's ICT systems .

Serve as an advisor to business functions, ensuring cyber security operations conform to group policies, procedures, and regulatory requirements .

Conduct audits within the cybersecurity and infrastructure portfolio, including areas like identity and access management, network security, and public cloud environments .

Identify and evaluate significant cyber security risk exposures and document audit results in line with the International Professional Practices Framework (IPPF) .

Follow up on the implementation of audit recommendations .

Qualifications & Experience:

Bachelor's Degree in Information Technology, Electrical Engineering, or Computer Science .

Professional Qualifications in Vulnerability Assessment and Penetration Testing (e.g., OSCP, CCIE Security, CRTO) are required .

Certifications like CISA/CISM/CISSP are an added advantage .

Minimum of 4 years of total experience, with at least 4 years in Cyber Security Reviews, Vulnerability Assessments, and Penetration Testing, and 3 years in IT Security and/or IT Audit

• Conduct cyber risk assessments and perform independent threat and vulnerability assessments and penetration tests on the bank's ICT systems .
• Serve as an advisor to business functions, ensuring cyber security operations conform to group policies, procedures, and regulatory requirements .
• Conduct audits within the cybersecurity and infrastructure portfolio, including areas like identity and access management, network security, and public cloud environments .
• Identify and evaluate significant cyber security risk exposures and document audit results in line with the International Professional Practices Framework (IPPF) .
• Follow up on the implementation of audit recommendations .

• Vulnerability Assessment
• Penetration Testing
• Cyber Risk Assessment
• IT Security Audit
• Network Security
• Cloud Security
• Identity and Access Management

• Bachelor's Degree in Information Technology, Electrical Engineering, or Computer Science .
• Professional Qualifications in Vulnerability Assessment and Penetration Testing (e.g., OSCP, CCIE Security, CRTO) are required .
• Certifications like CISA/CISM/CISSP are an added advantage .