IT and Cyber Control & Compliance officer

• Understand the payment engine flow and the IT assets involved;
• Assist in identifying and designing of controls;
• Coordinate and monitor the execution of the first-line controls;
• Assure the quality of the provided evidence;
• Test the effectiveness of controls and provide advice on the improvement of existing ICT controls.
• Report to management, to stakeholders (including the Internal Audit) the results of first-line controls;
• Follow-up the status of remediation actions related to these controls;

Contribute to creating/ update procedures and or standards:

• Identify impacted assets and processes upon policy & control changes;
• Allocate the implementation roles and responsibilities for each security requirement;
• Get implementers’ acceptance on the roles and responsibilities allocated to them.

• 2-5 year experience in IT and security technology and processes
• Experience in Metrics definition and dashboarding;
• Good knowledge of Excel (pivot tables, formulas) and Word, PPT;
• Knowledge of SharePoint (as a user)
• 2 years’ experience in designing and implementing IT generic controls (good knowledge of Identity & Access Management);
• Skills in coordination of / collaboration with different teams and external resources.
• Experienced with regulatory requirements, ISO/IEC standards (eg: 27001 Information Security Management Standard,…), laws and regulations (CHAPS, CIS);

• Experience in developing and implementing policies and / or processes in IT area;
• Certified ISO27001 Lead Implementer;
• Knowledge of NIST control framework, PCI Standard, CIS20, SIG;
• Knowledge of GRC Tools such as RSA Archer;
• Project Management/coordination skills
• Knowledge of Agile Methodology

• 2-5 years’ experience in IT and Information Security environments;
• Capability to quickly understand end-to-end process flows and control needs;
• Experience in Reports and Memo drafting, and reports ad presentations addressed to senior management.

• Preference will be given to candidate that have a good knowledge / practical experience of different bank entities / processes if possible.

•  Quick self-starter, pro-active attitude; team player;
•   Highly productive and able to deliver within agreed deadlines
•   Excellent English writing skills;
•   Strong analytical skills and detail oriented.
•   Ability to produce structured and concise documents;
•   Ability to work in a dynamic and multi-cultural environment;
•   Able to manage and prioritize tasks running in parallel.