Manager - Cyber & InfoSec Operations

About the role

The Manager - Cyber & Information Security (InfoSec) Operations supervises the bank's cyber defense operations, ensuring timely detection, response and resolution of security incidents. The role covers incident handling, digital forensics and third-party cybersecurity coordination, while maintaining compliance with regulatory and internal security frameworks. It also supports operational security controls, drives continuous improvement in threat response and works with stakeholders to protect the bank's information assets across platforms and vendors.

Key responsibilities

• Manage the full lifecycle of incident response (detection, triage, containment, eradication, recovery, post-incident review) and conduct root cause analysis of compromised systems
• Investigate incidents such as unauthorized access, insider threats and external attacks, and update and test incident response plans and playbooks
• Interface with MSSPs and vendors on alert triage, escalation and monitoring performance, and optimize SIEM rules and detection logic
• Conduct risk assessments, vulnerability scans and penetration testing, and implement and maintain the information security program
• Develop and enforce cybersecurity policies and standards aligned with ISO 27001, CBO and MTCIT, and manage ISO 27001 certification and the ISMS
• Maintain the risk register, audit findings and remediation tracking, and approve access changes as the designated ISO authority
• Coordinate access controls for staff, vendors and contractors, and provide security input for new IT and business projects
• Deliver cybersecurity awareness training, lead cyber drills and communicate incident updates to stakeholders
• Act as Data Privacy Officer: ensure GDPR, CCPA, CDC, MTCIT, CBO and PDPL compliance, run PIAs and DPIAs, manage data subject requests and serve as the main contact for regulators
• Implement the information security roadmap, maintain vendor risk registers and deliver dashboards and executive summaries to senior management

Required profile

• Bachelor's degree in Information Security, Cybersecurity, Information Systems or a related field
• Professional certification in information security (e.g., GCIH, GCFA, GCFE, CISSP, CEH, CISM, ISO 27001) preferred
• At least 4 years of experience, including at least 2 years in a banking or regulated environment
• Familiarity with country-specific information security regulations

Required skills

• Knowledge of ISO 27001 and related global standards
• Ability to conduct risk, vulnerability and penetration testing
• Ability to develop IS standards, procedures and controls
• Familiarity with cybersecurity tools such as SIEM, EDR and forensic platforms

Applications are accepted until 15 November 2026 at 2:00 p.m.; submissions after that deadline will not be considered.