Information Security Officer - Banking

As an Information Security Officer in the banking sector, you will be responsible for safeguarding the organization's sensitive data and systems from cyber threats and attacks. Your role will involve developing, implementing, and maintaining security policies and procedures to ensure compliance with regulatory requirements and industry best practices. You will conduct regular security assessments, identify vulnerabilities, and recommend solutions to mitigate risks. Additionally, you will collaborate with IT teams to monitor network activity, investigate security incidents, and respond to breaches in a timely manner. Strong communication skills and the ability to stay up-to-date with the latest security trends are essential for success in this role. A bachelor's degree in computer science or related field, along with relevant certifications such as CISSP or CISM, is typically required.

Responsibilities

• Develop and implement information security policies and procedures to protect sensitive data within the banking institution.
• Monitor and analyze security incidents, conducting investigations to determine root causes and implementing corrective actions.
• Conduct regular security audits and vulnerability assessments to identify potential risks and recommend appropriate mitigation strategies.
• Manage access controls, user permissions, and authentication protocols to ensure data confidentiality and integrity.
• Collaborate with IT and business units to ensure compliance with industry regulations and best practices for information security in banking.
• Provide guidance and training to staff on security awareness and best practices for protecting sensitive information.
• Implement and manage security technologies such as firewalls, intrusion detection systems, and encryption tools to safeguard the banking infrastructure.
• Respond to security breaches and coordinate incident response efforts to minimize impact on banking operations and customer data.
• Stay informed about emerging threats and security trends in the banking industry, recommending proactive measures to enhance security posture.
• Prepare and present regular security reports to senior management, outlining key security metrics, incidents, and recommendations for continuous improvement.

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Certified Information Systems Security Professional (CISSP) accreditation preferred.
• Minimum of 5 years of experience in information security, preferably in the banking or financial services industry.
• Strong understanding of regulatory requirements such as FFIEC, GLBA, and PCI DSS.
• Excellent communication skills and ability to effectively educate and train staff on security best practices.