Purpose of the Job: To lead and oversee the Bank’s technical security operations and digital fraud mitigation strategies. This role is responsible for the 24/7 monitoring of the Bank’s technology ecosystem through the Security Operations Center (SOC), the identification and investigation of digital financial crimes, and the implementation of technical controls to safeguard the Bank's assets and customer trust in digital channels.
Generic Functions:
- Develop, review and implement policies & procedures, plan /budget of the division
- Demonstrate the Bank’s code of conduct, culture & ascertain that subordinates abide by same
- Cultivate a working environment that promotes teamwork, collaboration, and transparency among staffs
- Provide services as per the service level agreement, follow- up & monitor subordinates to do the same
- Mentor and coach subordinates towards effective career development
- Adhere to internal control system, risk management program of the Bank and NBE’s Directives, rules and regulations
- Adhere to internal control system and risk management program of the Bank
- Handle other related generic activities as deemed necessary
Specific Functions:
- Oversee the 24/7 Security Operations Center (SOC) and manage the SIEM/Log Management environment to ensure real-time threat detection and response
- Manage the design, installation, and hardening of the security perimeter, including Enterprise Firewalls, WAF, VPNs, and Network Intrusion Detection Systems (NIDS)
- Direct the Bank-wide Vulnerability Assessment and Penetration Testing (VAPT) program, ensuring critical banking systems are regularly tested for flaws
- Supervise the implementation of Endpoint Detection & Response (EDR) and manage enterprise-level Identity & Access Management (IAM) and Multi-Factor Authentication (MFA)
- Serve as the primary leader for the Cyber Incident Response Team (CIRT), managing technical remediation and communication during major security breaches