IT Security Control

About the Role

Establish and execute information security operations and projects that align with bank policy and strategy, with a focus on vulnerability management, risk mitigation, documentation, and stakeholder collaboration.

Responsibilities

• Establish a plan and execute information security operations and projects in line with bank policy and strategy.
• Develop and maintain roadmaps for vulnerability management programs and cooperate with related parties to close gaps.
• Work with internal stakeholders across the business to identify, assess, report, track, and remediate risks and support the development of risk mitigation strategies.
• Own, maintain, and update information security documents such as guidelines, baselines, and internal processes.
• Participate in groups or projects to ensure proposed solutions are in line with security requirements.
• Ensure security operations comply with bank policy and standards (e.g., ISO27001) and are properly implemented.
• Actively work closely with 2nd line department or business partners to identify and mitigate risks to an acceptable level.
• Proactively maintain and report responsible team KPIs.
• Provide risk-based advice or support that aligns with IT and related departments.

Qualifications

• At least 5 years of experience in IT Security Control.
• Demonstrated experience in team and project management.
• Familiarity with security technologies including project implementation.
• Experience leading vulnerability management and mitigation solutions.
• Strong understanding of security frameworks and standards (e.g., ISO 27001, PCI-DSS, NIST, OWASP).
• Ability to think holistically (big picture).
• Proven in-depth technical knowledge of information security.
• Excellent communication and presentation skills.

Skills

• Vulnerability management and mitigation
• Security frameworks and standards (ISO 27001, PCI-DSS, NIST, OWASP)
• Security technology implementation
• Risk assessment and mitigation
• Documentation and process maintenance
• KPI tracking and reporting
• Project management and stakeholder communication