Description

Key Responsibilities

• Continuously monitor the Bank’s cyber estate, security alerts and events for indicators of compromise, suspicious activity, policy violations and emerging threats.
• Triage, investigate, document, escalate and support containment, eradication, recovery and post-incident review of cybersecurity incidents in accordance with approved incident management procedures.
• Administer and monitor assigned cybersecurity platforms and controls, including EDR/XDR, SIEM, firewalls, DLP, email security, vulnerability management, encryption and other security technologies deployed by the Bank.
• Perform and coordinate vulnerability scanning and security assessments across servers, endpoints, networks, applications and other technology assets; track remediation actions to closure based on risk and agreed timelines.
• Monitor security configuration, patch exposure and compliance with approved security baselines, standards and hardening requirements, and escalate material exceptions.
• Support security architecture reviews for new systems, technology changes, integrations and infrastructure implementations, and assess compliance with approved cybersecurity, enterprise architecture and technology standards.
• Support cybersecurity risk assessments, technology due diligence and thirdparty/vendor security reviews, and follow up agreed risk-treatment actions.
• Support identity and access security reviews, including privileged-access monitoring, periodic access reviews and investigation of anomalous access activity, in collaboration with relevant system owners.
• Monitor relevant cyber-threat intelligence and security advisories, assess potential impact on the Bank, and recommend appropriate preventive or detective actions.
• Support cybersecurity awareness activities, phishing simulations and targeted security sensitization for Bank staff, and provide guidance on secure use of technology.
• Support technology audit readiness, regulatory reviews and pre-audit security inspections; maintain evidence and track cybersecurity audit and assurance findings to closure.
• Prepare regular and ad-hoc cybersecurity reports, dashboards, metrics and key risk indicators covering incidents, vulnerabilities, security-control effectiveness, user awareness and remediation status.
• Maintain accurate cybersecurity procedures, incident records, security inventories, configuration records and other operational security documentation. Work with BT teams, business users, vendors, service providers and incidentresponse partners to investigate security issues and implement agreed remediation measures.
• Participate in business continuity, disaster recovery and cyber-resilience exercises to ensure security considerations are incorporated and lessons are addressed.
• Perform other cybersecurity and security-assurance duties assigned by the Manager BT Security & Architecture, consistent with the purpose and level of the role.

Technical Skills

• Demonstrated working knowledge of cybersecurity operations, incident response, vulnerability management, security monitoring and cyber-threat analysis.
• Working knowledge of enterprise security technologies including SIEM, EDR/XDR, firewalls, DLP, encryption, email security and vulnerabilitymanagement tools.
• Strong understanding of TCP/IP networks, network-security concepts, Windows and Linux operating systems, server and endpoint security, and common enterprise infrastructure.
• Demonstrated working knowledge of identity and access management, privileged access, authentication, authorization and access-control principles.
• Understanding of information-security frameworks, standards and good practices such as ISO/IEC 27001, NIST Cybersecurity Framework and CIS Controls.
• Understanding of secure systems development, change management and the Systems Development Life Cycle (SDLC), including DevSecOps, security requirements and controls throughout the lifecycle.
• Working understanding of security architecture principles, enterprise architecture standards and technology-control requirements sufficient to conduct security assurance reviews.
• Working knowledge of cloud and hybrid-environment security concepts would be an added advantage.
• Basic scripting or automation capability using PowerShell, Python or equivalent, and ability to query/analyse security data using SQL, would be an added advantage.
• Ability to prepare meaningful security dashboards, metrics, key risk indicators and management reports.

Education & Requirements

Education:

• Minimum of a Bachelor’s degree in Computer Science, Information Technology, Information Systems, Cybersecurity, Computer Engineering, Telecommunications, Mathematics or another relevant cybersecurity related discipline from a recognized institu

Additional Details

Level of Authority

• Execute assigned cybersecurity monitoring, analysis, administration and assurance activities within approved policies, procedures and delegated access rights.
• Escalate material cybersecurity incidents, vulnerabilities, control failures and policy exceptions promptly to the Manager BT Security & Architecture and other designated stakeholders.
• Recommend security-control improvements and remediation actions based on analysis, risk and good international practice.
• Collaborate with BT teams and business users on cybersecurity and security architecture matters without assuming ownership of infrastructure availability, application support or business-system administration.

Relationships

Internally: Business Technology units and all Bank departments and staff as required. Externally: Technology and cybersecurity vendors, managed service providers, auditors, consultants, regulators and other authorized external stakeholders.

Experience

• Minimum of five ( years’ relevant Enterprise ICT experience, including at least three ( years in information/cybersecurity, security operations, infrastructure security, security engineering or technology risk.
• Hands-on experience in cybersecurity monitoring, incident investigation and/or administration of enterprise security technologies such as SIEM, EDR/XDR, firewalls, DLP, vulnerability-management or email-security platforms.
• Practical experience in vulnerability assessment, security hardening, remediation tracking and security-control monitoring.
• Experience participating in security reviews for technology projects, system changes, integrations or architecture assessments.
• Experience in a regulated financial institution, public-sector organization, telecom, fintech, managed-security service provider or similarly complex technology environment would be an added advantage.
• Exposure to penetration testing or ethical hacking is an added advantage.

Behavioural Competencies

• Strong analytical and problem-solving ability, sound judgement and appropriate escalation of risk.
• High integrity, confidentiality and professional ethics when handling sensitive security information.
• Attention to detail, curiosity and persistence in analysing security events and identifying root causes.
• Good written and verbal communication skills, including the ability to explain cybersecurity risks and recommendations to technical and non-technical stakeholders.
• Ability to collaborate effectively across BT, business units, assurance functions, vendors and external service providers.
• Ability to manage competing priorities, work under pressure during incidents and maintain accurate documentation.
• Commitment to continuous learning and knowledge transfer in a rapidly changing cybersecurity environment.

• Continuously monitor the Bank’s cyber estate, security alerts and events for indicators of compromise, suspicious activity, policy violations and emerging threats.
• Triage, investigate, document, escalate and support containment, eradication, recovery and post-incident review of cybersecurity incidents in accordance with approved incident management procedures.
• Administer and monitor assigned cybersecurity platforms and controls, including EDR/XDR, SIEM, firewalls, DLP, email security, vulnerability management, encryption and other security technologies deployed by the Bank.
• Perform and coordinate vulnerability scanning and security assessments across servers, endpoints, networks, applications and other technology assets; track remediation actions to closure based on risk and agreed timelines.
• Monitor security configuration, patch exposure and compliance with approved security baselines, standards and hardening requirements, and escalate material exceptions.
• Support security architecture reviews for new systems, technology changes, integrations and infrastructure implementations, and assess compliance with approved cybersecurity, enterprise architecture and technology standards.
• Support cybersecurity risk assessments, technology due diligence and thirdparty/vendor security reviews, and follow up agreed risk-treatment actions.
• Support identity and access security reviews, including privileged-access monitoring, periodic access reviews and investigation of anomalous access activity, in collaboration with relevant system owners.
• Monitor relevant cyber-threat intelligence and security advisories, assess potential impact on the Bank, and recommend appropriate preventive or detective actions.
• Support cybersecurity awareness activities, phishing simulations and targeted security sensitization for Bank staff, and provide guidance on secure use of technology.
• Support technology audit readiness, regulatory reviews and pre-audit security inspections; maintain evidence and track cybersecurity audit and assurance findings to closure.
• Prepare regular and ad-hoc cybersecurity reports, dashboards, metrics and key risk indicators covering incidents, vulnerabilities, security-control effectiveness, user awareness and remediation status.
• Maintain accurate cybersecurity procedures, incident records, security inventories, configuration records and other operational security documentation. Work with BT teams, business users, vendors, service providers and incidentresponse partners to investigate security issues and implement agreed remediation measures.
• Participate in business continuity, disaster recovery and cyber-resilience exercises to ensure security considerations are incorporated and lessons are addressed.
• Perform other cybersecurity and security-assurance duties assigned by the Manager BT Security & Architecture, consistent with the purpose and level of the role.

• Demonstrated working knowledge of cybersecurity operations, incident response, vulnerability management, security monitoring and cyber-threat analysis.
• Working knowledge of enterprise security technologies including SIEM, EDR/XDR, firewalls, DLP, encryption, email security and vulnerabilitymanagement tools.
• Strong understanding of TCP/IP networks, network-security concepts, Windows and Linux operating systems, server and endpoint security, and common enterprise infrastructure.
• Demonstrated working knowledge of identity and access management, privileged access, authentication, authorization and access-control principles.
• Understanding of information-security frameworks, standards and good practices such as ISO/IEC 27001, NIST Cybersecurity Framework and CIS Controls.
• Understanding of secure systems development, change management and the Systems Development Life Cycle (SDLC), including DevSecOps, security requirements and controls throughout the lifecycle.
• Working understanding of security architecture principles, enterprise architecture standards and technology-control requirements sufficient to conduct security assurance reviews.
• Working knowledge of cloud and hybrid-environment security concepts would be an added advantage.
• Basic scripting or automation capability using PowerShell, Python or equivalent, and ability to query/analyse security data using SQL, would be an added advantage.
• Ability to prepare meaningful security dashboards, metrics, key risk indicators and management reports.

• Minimum of a Bachelor’s degree in Computer Science, Information Technology, Information Systems, Cybersecurity, Computer Engineering, Telecommunications, Mathematics or another relevant cybersecurity related discipline from a recognized institu