Job Description
The Job Role
- Provide independent oversight of information security governance, cyber security risks, control effectiveness, and remediation activities.
- Maintain the Bank’s information security governance framework and report key risks, control deficiencies, and security metrics to management and governance forums.
- Coordinate compliance with regulatory requirements, ISO/IEC 27001, ISO/IEC 27035, PCI DSS, internal policies, audits, and relevant industry standards.
- Develop, review, and maintain information security policies, standards, procedures, guidelines, and associated document controls.
- Perform security assurance activities, including access reviews, privileged access oversight, endpoint control monitoring, and tracking of security findings.
- Maintain the information classification framework and support data classification, sensitive information protection, and Data Loss Prevention controls.
- Plan and deliver information security awareness, training, communications, campaigns, and phishing simulations, and measure their effectiveness.
- Coordinate information security incident reporting, escalation, response, investigation, corrective actions, lessons learned, and cyber resilience activities.
- Support internal and external audits, regulatory examinations, independent assessments, evidence management, and timely closure of findings.
- Engage business, technology, risk, audit, compliance, legal, human resources, regulators, assessors, and service providers on security matters, projects, and third-party engagements.
The Person
- Possess a bachelor’s degree in Information Security, Information Technology, Computer Science, Cyber Security, Risk Management, or a related discipline; a master’s degree is an advantage.
- Minimum 5 years of banking or financial services experience and exposure to governance, risk, compliance, audit, or security programs preferred.
- Deep understanding of regulatory frameworks from CBSL and management compliance standards (e.g., PCI DSS, industry mandated ISO standards).
- Possess relevant professional certifications such as CISSP, CISM, CISA, CRISC, PCI DSS related credentials, ISO/IEC 27001 or 27035.
- Demonstrate strong technical and managerial competencies in security governance, risk and compliance, incident and data protection, leadership, strategic planning, communication, analysis, decision-making, and stakeholder coordination.
Interested candidates who meet the above requirements are invited to submit their CVs via Union Bank Job Portal on or before 16th November 2026 with the names of two non-related referees, quoting "Manager - Information Security & Governance" in the subject line.
All applications will be treated with strict confidence. Only shortlisted candidates will be contacted.
We are an equal opportunity employer!