Manager, Information

Job Purpose

• Develop, manage and enforce approved information security and cyber risk management strategies, framework and processes, while protecting the confidentiality, integrity and availability of information assets to create value and protect the Bank's business and reputation.

Job Responsibilities

Lead the development, implementation, enforcement and continuous improvement of information security, cyber resilience and cyber crisis and incident management framework, policies and processes.

Develop, implement, and enforce of Information Security, cyber resilience and Cyber Crisis and Incident Management Framework, Policies and Processes.

Develop, implement, and monitor implementation of Cyber Security Strategic Plan (CSSP).

Lead the development, implementation, enforcement and continuous improvement of Cyber Security Strategic Plan (CSSP).

Aligned the implementation of CSSP with IT Roadmap and meeting stakeholders' needs in an effective manner.

Develop, implement, enforce, and provide assurance on effectiveness of information security management programs, controls, processes and tools.

Conduct risk assessment and quality assurance on new business initiatives, products and services, IT systems and projects that carry information and cyber security risk implications.

Conduct regular assessment and reporting on the Bank's information security and cyber resilience posture, threats and emerging risks

Promote and maintain effective information security and cyber risk management control systems and environment.

Conduct thematic review on new / existing business initiatives, products and services, IT systems and projects that carry information security and cyber risk.

Determine and oversee the implementation of cyber security strategies based on the gaps identified during cyber drill and red team exercises.

Plan the processes and security controls required to address the gaps identified during cyber drill and red team exercises.

Effective information security and cyber security awareness program across the Bank, focusing on CRFP and CSSP.

Conduct information security and cyber security awareness program across the Bank

Job Requirements