Chief Information Security Officer

We are seeking an accomplished Chief Information Security Officer (CISO) to lead the Bank's enterprise information and cybersecurity strategy. The CISO will be responsible for safeguarding the Bank's information assets, digital platforms, customer data, and critical infrastructure while ensuring compliance with applicable regulatory requirements and industry standards.

Reporting to executive leadership, the CISO will partner with business, technology, risk, audit, and compliance teams to strengthen the Bank's cyber resilience, manage enterprise cyber risk, and support secure digital transformation initiatives.

Key Responsibilities

• Develop and execute the Bank's enterprise information security and cybersecurity strategy aligned with business objectives and regulatory expectations.
• Establish and oversee the Bank's cybersecurity governance framework, policies, standards, and controls.
• Lead enterprise cyber risk management, security operations, threat intelligence, vulnerability management, identity and access management, and incident response.
• Provide regular cybersecurity risk reporting, key metrics, and strategic recommendations to Executive Management, Board Committees, and regulators.
• Lead cyber incident preparedness, crisis management, business continuity, and disaster recovery planning.
• Promote a culture of security awareness across the organization through education, governance, and secure-by-design practices.
• Evaluate emerging cyber threats, technologies, and regulatory developments to continuously enhance the Bank's security posture.
• Build, mentor, and lead high-performing cybersecurity teams while managing the information security budget and strategic roadmap.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related discipline; Master's degree preferred.
• Proven experience leading enterprise cybersecurity programs
• Strong knowledge of banking technologies, cloud security, network security, application security, IAM, data protection, and security architecture.
• Deep understanding of banking regulations, technology risk management, and cybersecurity governance.