Senior Joint Director Cyber Ops & Response-SBP, Karachi

By (CORe) Division, State Bank of Pakistan, Karachi                Qualification:

• Master’s degree with at least 16 years of education in Information/Cyber Security, Computer Science, Information Technology, Computer Engineering, or other related fields from HEC recognized university or from a reputable foreign university. 
• Relevant IT / Cyber Security Certifications would be preferred like CISSP, CEH, CHFI, eCIH, ISO 27001 LI, CISM, etc.

Experience:

• At least 12 years of experience working in IT/IT Security/Cyber security Operations with at least 7 years in a middle management position.                         

Jobs Description:

• • Lead the Cyber Security Operations and Incident Response Division and protect Bank’s IT Systems and Infrastructure from cyber security threats by utilizing modern tools, techniques and procedures and deliver 24×7 security monitoring, detection, analyses and response services.
  • Develop and implement necessary policies, processes and procedures for CORe services and operations and maintain smooth coordination with IT Operations group and relevant stakeholders to ensure suspicious or detected cyber threat or vulnerability in the IT system is addressed and resolved in quickest possible way.
  • Supervise and manage the division, its resources, operations and development projects to continuously improve and automate CORe operations. Ensure deployment and management of technical solutions like SIEM, FIM, SOAR, SVA, Threat Intel and Forensic tools.
  • Develop dashboards and monthly and quarterly reports for various areas of IT infrastructure for management and analysis of cyber security status
  • Lead and manage software vulnerability assessment exercises to determine the status of overall vulnerability posture.
  • Lead incident analysis, review incidents and invoke incident response in case of a successful incident. Perform administration, update, hardening, and optimization of SIEM Platform.
  • Design, implement, and optimize SIEM backup and its recovery setup.
  • Ensure development, maintenance and regular update of cyber security incident response plan for SBP based on best industry practices and in liaison with the concerned stakeholders.
  • Supervise the performance of investigations and follow-ups with the IT group of a cyber-security incident and policy breaches through digital forensics and malware analysis.
  • Ensure effective preparation, planning, and conduct of cyber security exercises by conducting table top exercises including drills and scenario-based testing of Incident Response Plan and continuously develop and maintain IR Playbooks.
  • Ensure problem-free coordination of security incident response efforts among relevant stakeholders and record all IT security incidents along with follow-ups with relevant teams.