Chief Information Security Officer

• To provide highly skilled, specialist services to provide information security, Data Protection, and Business Continuity Management at the Country level, to represent Group Information Security strategies at the Country Level.     
• Liaises with contractors and service providers to ensure that all activities are in line with the Bank's Information Security Policy
• Provides direct Information Security Awareness training and oversight to all employees, and other third parties, ensuring proper information security clearance in accordance with established bank information security policies and procedures. 
• Initiates, facilitates, and promotes activities to create information security awareness within the Bank.
• Develop and implement an ongoing risk assessment program targeting information security and business systems. Recommend methods for vulnerability detection and remediation. 
• Perform information & Cybersecurity risk assessment, vulnerability assessments, and serve as an internal assessor for security issues. 
• Develop and implement an incident reporting system to address security incidents, respond to alleged policy violations from staff, contractors, and external parties.
• Provides guidance and direction for the physical and logical protection of Information Technology resources to other functional systems.
• Reviews all system-related security plans throughout the bank's network.
• Conducts investigations on security breaches, reports findings, and makes recommendations to Executive Management 
• Monitors the internal control systems to ensure that appropriate access levels are maintained. 
• Reviews security logs on critical servers and communicates exceptions to Head, IT, and Operations
• Establishes a reporting process to ensure that Executive Management is kept apprised of the effectiveness of Information Technology Security and problem resolution.
• Maintain and drive the Information Security Management System (ISMS) Program and ensure that the bank continues to maintain ISO27001 international certification.

Perform any other duties assigned by the Superior