Specialist IT Security

Job Description

We are looking for an experienced Specialist – IT Security to support the implementation and management of information security solutions in line with the Bank's business, technology and regulatory requirements.

Key Responsibilities

• Implement and maintain IT security solutions aligned with the Bank's security architecture, policies and risk-management framework.
• Assess technical, privacy and regulatory requirements and recommend appropriate security solutions.
• Conduct security design reviews for new applications, enhancements and technology changes.
• Identify emerging vulnerabilities and recommend suitable mitigation measures.
• Manage routine security activities, including firewall controls, antivirus checks, patching, unauthorised application controls and USB restrictions.
• Perform vulnerability assessments, penetration testing and manual source-code security reviews.
• Support incident response activities and prepare security incident reports.
• Maintain information security policies, standards, procedures and supporting documentation.
• Coordinate regular maintenance, upgrades and patching with infrastructure and application teams.
• Manage security vendors and outsourced service providers, including performance monitoring and contract-related activities.
• Support periodic security audits and ensure timely closure of audit observations.
• Provide IT security guidance to business units and technology project teams.
• Support employee awareness programmes covering digital hygiene and information security practices.
• Monitor security service performance and provide regular MIS and security health reports.

Desired Candidate Profile

• Bachelor's degree in Engineering, Computer Science, Information Technology, B.Sc. or BCA.
• Minimum 5 years of relevant experience in IT security or cyber security.
• Strong knowledge of data security practices, network security, operating systems and database security.
• Working experience in vulnerability assessment, penetration testing and incident response.
• Familiarity with firewalls, wireless security, VPN, Linux, Microsoft Windows and SQL Server.
• Strong analytical, critical-thinking and problem-solving capabilities.
• Effective communication and stakeholder-management skills.
• Ability to coordinate with cross-functional teams, vendors and external security service providers.
• Relevant industry certifications in IT security, networking, operating systems or penetration testing will be an advantage.