Chief Information Security Officer-FWBL, Karachi

By First Women Bank Limited, Karachi                                      Qualification:

• Bachelors or Masters in the field of Computer Science or in same discipline. Additional, certifications (e.g. CISM, CISA, Ethical Hacking, etc.) in the same discipline would be preferred.

Experience:

• Skills: Well versed of ISO 27001/27002, ITIL or COBIT frameworks. · PCI DSS, Pen-testing, Vulnerability and other compliance assessments · Sound management skills, strong leadership and motivational skills.
• Good understanding of Structured Management of Information Technology Departments.
• Strong understanding of available and emerging technologies is essential.

Jobs Responsibilities:

• Develop, maintain and oversee “Information Securities policies, procedures and control framework” to address all applicable IT security requirements.
• Ensure that information assets and technologies are adequately protected in line with regulatory requirements/guidelines as well as internal policies.
• Review “IT security standards” on a continuous basis with appropriate response planning.
• · Develop and implement effective security monitoring of vulnerabilities, threats and events in network and host systems. · Supervise the mechanism to detect, report, and mitigate incidents that may impair adequate data and infrastructure security.
• Conduct “IT Security – Risk Assessments” and ensure that the senior management is timely communicated.
• Develop SOP to handle security incidents and direct a full enquiry with recommended courses of action. ·
• Manage “Threat Intelligence” and “SIEM Platforms” · Anticipate new security threats and stay updated with growing challenges and Strengthen monitoring mechanism and controls especially from cyber threats ·
• Interact with vendors and to manage IT security projects · Circulation of reports on Cyber activity taking place on Bank’s network for senior management and other stakeholders.
• “Vulnerability Assessment” of OS, network, DBMS, applications, Software (SVA) and end users.