Manager Infrastructure Security (AVP)

About the role

The Manager Infrastructure Security (AVP) will lead and continuously improve the bank’s infrastructure security program, ensuring alignment with business goals, regulatory requirements, and industry best practices.

Key responsibilities

• Manage security architecture reviews for infrastructure projects and provide guidance on secure design for servers, virtualization platforms, cloud services, storage systems and network infrastructure.
• Oversee vulnerability assessments, configuration compliance reviews, penetration‑testing coordination, CIS benchmark assessments and OS hardening across the enterprise.
• Prepare and maintain vulnerability MIS, track remediation, and produce dashboards and reports for senior management.
• Define, implement and maintain security governance, policies, standards and baselines for servers, operating systems, ATMs, virtualization platforms, cloud environments and storage systems.
• Coordinate with IT, Cloud, Database and System Administration teams to ensure effective implementation of security controls.

Required profile

• Minimum graduation in Computer Science, Computer Engineering, Cybersecurity or Information Technology; Masters or relevant certifications preferred.
• At least 6 years of experience in IT and/or information security, with hands‑on exposure to infrastructure security across enterprise environments.
• Strong understanding of risk frameworks, security policies and infrastructure security tools.

Required skills

• Operating systems (Windows Server, Linux), SAN/NAS, Containers, Identity & Access Management, Data security lifecycle.
• Virtualization platforms (e.g., VMware), Cloud environments (e.g., Azure, AWS), CIS Benchmarks, vulnerability assessment tools, penetration‑testing coordination, OS hardening.
• Security architecture review, security governance, policy development, compliance reporting.
• Relevant certifications such as GSEC, SC‑100, AZ‑500, VMware VCP‑DCV, RHCE, CompTIA CySA+.