Job Description
People's Bank, a premier bank in Sri Lanka with the largest customer base providing innovative financial solutions to its diversified clientele for over six decades and as a conducive environment for those who strive to achieve excellence and believe in professionalism, the Bank is looking for a talented & dynamic individual to fill the following position in the Bank.
CHIEF MANAGER - TECHNOLOGY RISK
The duties and responsibilities relevant to the position of Chief Manager - Technology Risk among others are;
Planning & Reporting
- Develop, establish, and implement policies and frameworks for IT security and risk management.
- Monitor, analyze, and report information related safety and security measures of the bank.
- Prepare reports related to Technology Risk to Board & Management committees as required by DCM – Risk Management.
Leadership and Management
- Perform/monitor technology risk assessments, including analyzing, identifying, describing, and quantifying technology risk that impact all business operations of the bank.
- Review technology risk-related disaster recovery procedures and prepare technology risk management plans to facilitate the bank’s business continuity plan.
- Monitor and analyze technology risk-related security alerts.
- Implement and periodically review the Risk and Control Self-Assessment (RCSA) processes for information technology and information security-related services, including third-party service providers.
- Conduct Risk and Control Self-Assessment (RCSA) processes quarterly for information technology and information security-related services.
- Establish and monitor risk indicators related to Technology Risk Management.
- Design and establish a comprehensive technology risk management process in line with CBSL Direction No. 16 of 2021 and its addendums.
- Ensure compliance with CBSL Direction No. 16 of 2021 and its addendums.
- Periodically check the achievement of action plans relevant to technology risk management.
- Assist senior management by aligning technology risk initiatives with business objectives.
- Represent Risk Management Department in Management Committees.
- Conduct IT related awareness sessions for bank staff.
- Coordinate with Information Security Department, Information Technology Department, Digital Unit, Data Protection Unit, Regulators, External and Internal Auditors.
- Prepare and implement strategic plans for Information Technology Unit in an on-going basis.
Market Scoping, Business Development & Brand Positioning
- Analyze technology risks at the time of introducing new technology-driven products or services to the bank and report IT vulnerabilities and mitigating measures.
- Review IT projects regarding their technology risks.
Relationship, Stakeholder and Key Account Management
- Maintain relationships with ISO Unit, IT Department, and Internal Audit Department.
- Develop and maintain good communication channels with other risk partners such as Enterprise Risk Management, Operational Risk Management, etc.
- Create and maintain an external network with other senior IT risk managers and relevant risk forums.
ELIGIBILITY REQUIREMENTS
- Should be a citizen of Sri Lanka
ACADEMIC / PROFESSIONAL QUALIFICATIONS
Candidate should possess one of the following qualifications;
- (CISSP) Certified Information Systems Security Professional (CISSP)
- GIAC Information Security Professional (GISP)
- ISACA Certified Information Security Manager (CISM)
- ISACA Certified in Risk and Information Systems Control (CRISC)
- Masters’ Degree in Information Security or Master’s Degree in Computer Science/Information Technology specializing in Information Security
AND
- Applicants possessing an eligible professional qualification must complete CPD requirements of the relevant professional qualification or 20 CPD hours annually.
ROLE-SPECIFIC COMPETENCIES
- Knowledge on Technology Risk Management, including cyber security.
- Technical knowledge on IT systems and digital products used by the bank.
- Communication skill including technology risk related presentations.
- Comply with regulatory qualifications decided by CBSL from time to time.
- Ability to increase awareness, provide education and training to employees inside the organization.
- Proper understanding of new technology developments and possible technology threats.
- Ability to analyze information security measurements of the bank and re-engineering.
EXPERIENCE
Minimum one-year managerial level experience in Licensed Commercial Bank or Licensed Specialized Bank or Licensed Non-Bank Financial Institution.
Should be able to implement and operate regulatory requirements, the Bank policies and the market best practices within the Bank by giving leadership to the Technology Risk Unit - Risk Management Department and ensure fully complied with Technology Risk / Cybersecurity Risk requirements in relation to entire operations of the bank including operations conducted through agents and third-party service providers.
AGE
Age preferably below 50 years of age as at closing date of applications.
METHOD OF SELECTION
Shortlisted applicants based on the stipulated qualifications and experience will be called for an interview.
CONDITIONS OF EMPLOYMENT
The position of Chief Manager - Technology Risk is equivalent to the grade of Chief Manager (Grade I) in the Bank. The appointment will be made on permanent basis and performance will be evaluated annually.
REMUNERATION
An attractive and negotiable remuneration package commensurate with qualifications and experience will be offered to the selected candidate.
APPLICATIONS
Applicants are required to complete the relevant Application Form available on the Career Page of the People’s Bank website and submit the duly completed form via email address: [email protected] on or before 21.09.2026. The name of the position applied for must be clearly stated in the subject line of the email.
An email confirmation will be sent upon the receipt of the application. In the event a confirmation has not been received within a reasonable period of time, you may inquire regarding the application on telephone numbers 011 3741420/011 3741421.
All applications will be treated with strict confidentiality. Any form of canvassing or attempt to influence the selection process will result in disqualification. Applications are incomplete or do not comply with the requirements specified in the Application Form will be rejected.
The Bank reserves the right to decide the number of vacancies, postponement or cancellation of recruitment or on any other information not included in the advertisement.
By submitting your application, you acknowledge that People’s Bank will process your personal data solely for purposes connected with the recruitment and selection process for this vacancy. People’s Bank processes your personal data in accordance with the data protection principles set out in the Personal Data Protection Act, No. 9 of 2022, as amended. For further information regarding how we collect, use, protect and retain your personal data, and how you may exercise your rights as a data subject, please refer to the People’s Bank Privacy Notice available at www.peoplesbank.lk.
Deputy General Manager (Human Resources) People’s Tower - Level 14 No. 374, Dr. Colvin R. de Silva Mawatha Colombo - 02.
