Information Security Officer

Opportunity Information

The Role

To support the Information Security function in safeguarding the Bank’s applications, APIs and IT assets by assisting with user access management, privileged access controls, vulnerability assessment and security testing, and by supporting compliance with SBP requirements, ISO/ IEC 27001, PCI DSS and internal Information Security policies.

•Support user access provisioning, modification, de-provisioning and periodic access reviews across banking applications and IT systems •Support PAM operations and privileged account reviews, and assist in enforcing least privilege, RBAC and segregation of duties (SoD) •Assist in maintaining access records, review evidence and remediation trackers •Assist in vulnerability assessments and security testing of applications, APIs, infrastructure and IT assets, including support for API security testing (authentication, authorization and access control validation) •Support the coordination of VAPT activities, track vulnerabilities, and assist in remediation validation and retesting •Assist in security reviews of new applications, APIs and technology changes •Support security incidents, risk assessments, compliance activities and third-party security reviews as required •Assist in maintaining security documentation and support audits and regulatory assessments; support compliance with applicable SBP requirements, ISO/ IEC 27001, PCI DSS and internal Information Security policies

Applicants General Eligibility & Requirements

Education, Experience and Skills Requirements