Information Security Manager

About the role

The Information Security Manager will lead governance, assessments and compliance activities across the bank’s technical and business environment. The role ensures alignment with international security standards, internal policies and regulatory directives while supporting business growth and strategic initiatives.

Key responsibilities

• Develop, maintain and enforce cyber and information security policies, standards, procedures and guidelines.
• Perform hands‑on security and gap assessments, analyse vulnerability‑threat pairs and recommend appropriate controls.
• Coordinate, monitor and report on information security risk remediation and ensure proper treatment of reported risks.
• Manage the ISO 27001 Information Security Management System, including recertification and continuous improvement.
• Collaborate with business leaders to drive security risk to acceptable levels and ensure compliance with group policies.
• Lead special projects and third‑party assessments as assigned by the line manager.

Required profile

• Bachelor’s or Master’s degree in Computer Science, IT or related field.
• At least 10 years of experience in information security governance, assessment and compliance, preferably in banking or financial services.
• Professional certifications such as CISA, CISM, CISSP, CEH or ISO 27001 Lead Implementer.
• Strong understanding of the bank’s technical and business environment.

Required skills

• Deep knowledge of databases, operating systems, networking, user management, encryption and cryptography.
• Experience with change management, backup management and security technologies.
• Familiarity with ISO 27000 series, OWASP, PCI DSS and SWIFT CSCF standards.