Department Head, IT Security, Information Technology & Services

Job Purpose: The role encompasses providing comprehensive support to the GITD and Leadership for IT Security department, by offering clear communication and assistance across all IT departmental functions. Responsibilities include ensuring the alignment of IT operations with business strategies, executing IT Technology Strategies, and forecasting IT resource availability for timely solutions within the approved budget. It involves defining strategies to minimize system security issues for enhanced stability, managing IT costs, overseeing vendor relationships, and supervising the tactical aspects of the IT Transformation Program. A Head of IT Security (or Head of Cyber Security) defines and executes the organization's information security strategy, leading teams to protect digital assets, manage risks, and ensure regulatory compliance. He/She will oversee security operations (SOC), incident response, and security architecture while reporting to senior leadership. He/She will be responsible to manage the IT other security Operation including all IT security devices, IT security system and overall IT security resources. The incumbent plays a pivotal role in maintaining IT security by assuring adherence to zero trust processes/architecture and implementing robust IT security measures throughout the organization towards zero tolerance of fraud and cyber incidents. Principal Accountabilities: Financial Perspective a. To ensure initiatives, project and deliverables are utilizing allocated approved OPEX and CAPEX budget prudently and efficiently. b. To ensure compliance on procurement process including tender/project award, maintenance renewal activities and payment of invoices. c. Manage budgeting, financial control & review services for IT Department. d. To advise and assist on IT Technology solution for IT deliverables cost effective manner. Customer Perspective a. Responsible for IT delivery and execution of innovation initiative for Bank’s IT Security in order to improve productivity and customer experiences towards assisting business user on meeting the business objectives. b. Responsible for the continuous support of Bank’s IT operation and digital services on meeting productivity standard and customer satisfaction in assisting towards business user on meeting the business objectives. c. Oversees the application technology solution with customer focus in mind. Environment & Community Perspective a. Define and strategize IT security deliveries and changes to the systems, hence improving the stability and security of the operation and business environment. b. Lead and maintain a conducive working and service environment within Security and IT Department. Strategic & Operational Perspective a. Oversees the Development, update, and maintenance of IT security Checklist and policy together with other IT teams. b. Ensure and advise on the creation and execution of project/RFC work plans/timeline and management of revisions as appropriate to meet changing needs and requirements. c. To manage review of deliverables prepared by team to ensure all project goals have been achieved. d. Ensure and advise on technical issues and mitigation/action plan. e. Ensure important documents including timeline, requirement, test plan, test scripts and sign offs are complete, current, and stored appropriately. f. Advise/manage awareness to ensure adherence to Infrastructure policy and procedure. g. Lead, manage and supervise overall IT Security operations and IT Cyber Security operations for production, development and DR to ensure zero tolerance to cyber or any IT security incident. h. Involvements and responsibility for ensuring and monitoring various project management and reporting tasks related to IT Security. i. Responsible for ensuring support and maintenance for IT security systems in production through the enforcement of related ITSM/IT process improvement policies and procedures including management of incidents and problems, issues, maintenance renewal and documentation. j. Responsible for ensuring compliance on procurement process including vendor management, tender/project award, maintenance renewal activities and payment of invoices. k. Responsible for ensuring adherence to external and internal regulatory, audit and compliance requirements. l. Responsible on defining IT security vision, security policies, and risk management frameworks. m. Responsible on IT security engineering, security operations (SOC), and incident response, ensuring prompt mitigation of threats. n. Responsible on Conducting security audits, risk assessments, and maintain compliance with legal and industry standards. Qualifications & Skills: 10 -15 years of experience in IT Security Operation & Cyber Security Operation. 5 -10 years of leadership or management experience in banking system environments with exposure to NIST, ISO27001, GDPR, RMIT and industry best practices policy and framework. Experience in Modernization and Maintaining On-Premises and Cloud Security Infrastructure. Experience in Managing Leasing and Outright Purchasing of IT Security assets. Degree in Information Technology, Computer Science or other relevant major. Certifications: requires CISSP, CISM, or similar. Incident response and crisis management. Budget management and vendor relationship management. Ability to elicit cooperation from senior management, clients, and other departments. This position requires very minimal supervision from senior management staff and is expected to be performed completely independently using a high level of decision making on a regular basis.