Key Responsibilities

• Lead and coordinate the organization's Information Security processes and controls framework.
• Manage the Access Control Team, ensuring effective user access management and compliance with security policies.
• Coordinate and oversee IT Controls Testing activities, ensuring deficiencies are identified, tracked, and remediated.
• Perform cybersecurity risk assessments and support the implementation of risk mitigation plans.
• Contribute to the development, maintenance, and continuous improvement of Information Security policies, standards, and procedures.
• Ensure compliance with applicable regulations and security frameworks, including ISO 27001, GDPR, SWIFT, and DORA.
• Coordinate and manage external penetration testing engagements, ensuring findings are addressed and reported appropriately.
• Plan and execute internal phishing simulation campaigns, analyse results, and drive security awareness initiatives across the organization.
• Support security incident management activities and collaborate with IT teams to investigate and resolve security-related events.
• Prepare and present regular reports on information security risks, testing results, incidents, and compliance status to management.
• Act as a trusted advisor for information security matters across business and technology teams.

Required Qualifications

• 6+ years of experience in Information Security, Cybersecurity, IT Risk Management, or a related field.
• Previous experience in the banking or financial services industry is highly preferred.
• Solid experience with IT Controls Testing, security governance, and regulatory compliance.
• Practical knowledge of Information Security processes, risk assessments, and security control frameworks.
• Experience coordinating penetration testing, vulnerability remediation, and security assurance activities.
• Hands-on experience in conducting or managing security awareness and phishing simulation programs.
• Strong understanding of regulatory and industry standards, including ISO 27001, GDPR, SWIFT, NIST, COBIT, and DORA.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.
• Professional certifications such as CISSP, CISM, CRISC, or CISA are considered a strong advantage.

Technical Skills

• Good understanding of Data Loss Prevention (DLP) solutions and related security controls.
• Strong knowledge of Microsoft Active Directory and Microsoft Entra ID (Azure AD).
• Experience with Identity and Access Management (IAM) concepts and privileged access controls.
• Knowledge of vulnerability management, security monitoring, and incident response processes.
• Understanding of security architecture principles and security control implementation.

What We Are Looking For

• Strong ownership and accountability.
• Excellent communication (RO & EN) and stakeholder management skills.
• Ability to balance regulatory requirements with business needs.
• Analytical thinking and sound decision-making capabilities.
• A proactive mindset and passion for continuous improvement.
• High integrity and ability to build trust across the organization.