Job Purpose

To manage the Bank’s cybersecurity systems and infrastructure, and to ensure the protection and compliance of the Bank’s data and assets from cyber threats in alignment with the IT and business strategy. To contribute to the strategic direction and vision of the cybersecurity function and the Bank as a whole, and to oversee and mentor a team of IT Security Administrators.

The incumbent will be required to form part of a team that works in two shifts to cover the operational time window between 6:30am to 9:30pm.

Technical / Functional Responsibilities

To plan, design, and implement IT security solutions and services to meet the Bank’s internal and external customers’ requirements and the changing business demands, and to coordinate and collaborate with other IT and business units, external partners, and regulators on security-related matters.
To oversee and supervise the monitoring of systems’ security operations and events and lead the investigation and resolution of any outliers or incidents in order to ensure continued protection and compliance of the IT infrastructure services.
To identify and propose new operational security improvements by analysing users’ needs and expectations and providing appropriate IT solutions, and to evaluate and measure the effectiveness and efficiency of the implemented solutions.
To maintain an appropriate level of system security to mitigate any risks to availability, integrity, and confidentiality of information.
To contribute and control the change management process whereby reviewing and approving changes, ensuring system tests or providing test environments for business-driven tests and obtaining the necessary approval to ensure that changes do not adversely affect the production environment, and to communicate and document the changes to the relevant stakeholders.
To ensure that the IT systems are updated appropriately in line with internal policies and best practices.
To lead and conduct the compilation of specifications and evaluation of security technology-related procurements, and to negotiate and finalise the contracts and agreements with the vendors and suppliers.
To review and approve the operational documentation and to ensure and monitor that they are appropriately updated and maintained by the IT Security Administrators.
To develop and maintain disaster recovery of critical IT security related services. Apart from developing, compiling, maintaining, and implementing disaster recovery procedures this also includes the periodic disaster recovery testing and reporting on the respective outcome.
To ensure that the critical daily start of day and end of day processes are completed successfully so that services are available for business operation. This will entail that the incumbent will be required to form part of a team that works in two shifts to cover the operational time window between 6:30am to 9:30pm.
To keep abreast and adhere to established policies and procedures.
To report on activities undertaken.
To ensure a high quality / standard of work and service throughout.
To perform any other duties that may be assigned from time to time.

Competencies and Proficiency Levels

Within the context of their specific tasks, the incumbent is expected:

To be truthful and honest.
To have a positive, can-do attitude.
To share the Bank’s intolerance of sexism, homophobia, xenophobia, and racism, and to be respectful and caring towards others irrespective of sexual, religious, and political orientation.
To carry out their tasks professionally and ethically.
To communicate effectively.
To have a sense of the value of time and priorities.
To respect security and confidentiality.
To be able to lead and to work in teams as may be the case.

Experience and Qualifications:

A bachelor's degree at MQF Level 6 or higher in Science, Technology, Engineering, and Mathematics (STEM) or an ICT related field. Preference will be given to candidates who have a master's degree at MQF Level 7 in cyber security, information security, or a related discipline.
At least two years related work experience in the field of cybersecurity.
Knowledge and understanding of information security standards and best practices, such as ISO 27001, NIST, COBIT, etc., and, preferably, experience in applying and complying with them in a banking or financial environment.
Knowledge and experience working with firewalls, intrusion systems, log management, scripting (e.g., Python, PowerShell, etc.), and other key IT security infrastructure is an asset.
Knowledge and experience working with Microsoft 365, Defender, Sentinel, and other key IT security applications is an asset.
The ability to propose solutions to bring the benefits of information technology to solve business needs.
The ability to communicate with and understand the needs of the various business areas throughout the Bank and external suppliers.
Has a disposition to work on shift to cover the operational time window between 6:30am to 9:30pm.
The ability to work under pressure and handle multiple projects.

Working Relationships and Lines of Communication

Internal

Office Managers – Assistance in protecting IT services for business functions. Assistance in identifying appropriate solutions and coordinating deployment of Cybersecurity services.
Cybersecurity Office Members – Daily staff management, planning of tasks and allocation of resources.
Users – Communication to meet their technology related demands.

External

Suppliers – Communication to ensure that any services/support provided is in line with established service level agreements.

Cybersecurity Administrator

Job Description