Chief Information Security Officer
IT - Software / DB / QA / Web / Graphics / GIS
About the Employer
Job Description
CHIEF INFORMATION SECURITY OFFICER
HEAD OFFICE
For more than 38 years, we've helped millions of Sri Lankans lead more fulfilling lives. By taking care of their risks, we've given them the strength to dream big, and the peace of mind to follow those dreams. As we look ahead to the next 38 years, we're seeking the right individuals to lead us into a better, brighter future for us all.
Reporting Line
- The successful candidate will report directly to the Managing Director / Chief Executive Officer.
The Job
- Developing, managing and operationalising the Company's information security and cyber-security strategy, aligned with the Company's business objectives, risk appetite and regulatory requirements.
- Providing independent oversight and continuous monitoring of the Company's information-security environment and effectiveness of security controls.
- Leading information-security risk assessments, reviews and audits and remediation of identified vulnerabilities and control weaknesses.
- Ensuring compliance with applicable information-security, cyber-security, data-protection and technology-risk regulatory requirements, policies and recognised security standards.
- Maintaining robust incident response and disaster-recovery preparedness, including appropriate testing and simulations.
- Providing regular and effective reporting to the MD/CEO, relevant management/Board committees and the Board of Directors on material information-security risks, incidents and remediation progress.
- Overseeing security monitoring capabilities, including the Security Operations Centre (SOC), threat detection and escalation.
- Ensuring effective controls over identity and access management, privileged access, data encryption and data loss prevention, security logging and monitoring.
- Providing oversight of vulnerability assessments and independent penetration testing, and ensuring identified vulnerabilities are appropriately prioritised and remediated.
- Promoting information-security risk governance and aligning with the Company's risk management framework.
- Continuing to strengthen the Company's security posture through security architecture, incident response and business continuity planning.
- Collaborating with IT, Enterprise Risk Management, Compliance, Legal and business units to balance security and operational needs.
The Ideal Candidate
- A Bachelor's or Master's Degree in Information Security, Cyber Security, Computer Science, Information Technology or a closely related discipline.
- A recognised professional information-security qualification such as CISSP, CISM, CISA, GIAC, or equivalent.
- Minimum of 4 years' experience in a leadership role in information security, cyber security, technology risk or related disciplines, preferably within banking, insurance, financial services or other highly regulated environments.
- Strong knowledge of information-security governance, risk management, and regulatory requirements.
- Proven ability to communicate complex cyber and technology risks clearly to the Board, management, and staff.
The Rewards
An attractive remuneration package awaits the right candidate.
The Application
If you feel like you're the right person for this role, please forward your updated CV to Assistant General Manager - Human Resources. Please mention 'Chief Information Security Officer' in the subject line of the email.
