Chief Information Security Officer

About the role

The Chief Information Security Officer will lead the bank’s cybersecurity function, shaping strategy, governance and operational resilience to protect information assets and manage cyber risk across the organisation.

Key responsibilities

• Oversee and implement the enterprise cybersecurity programme, enforce policies and ensure alignment with ICT strategy, business objectives and regulatory requirements.
• Design, maintain and monitor enterprise‑wide security controls for internal and external users, reviewing policy exceptions to keep risk within acceptable thresholds.
• Conduct comprehensive cyber risk assessments at least annually and perform continuous monitoring to detect and respond to threats.
• Prepare and deliver quarterly reports on security posture, incidents, policy exceptions and programme effectiveness to senior leadership.
• Maintain and regularly update incident response and business continuity plans, oversee disaster‑recovery testing and ensure robust data‑backup processes.
• Define clear roles and responsibilities for cyber risk management and communicate them across the organisation.
• Develop and execute the people management strategy for the unit, building a high‑performing leadership team and fostering a culture of performance and transformation.

Required profile

• Proven ability to define and communicate clear roles and responsibilities for cyber risk management.
• Experience building, developing and leading cohesive, high‑performing teams.
• Capability to drive a high‑performance culture through mentoring, coaching and formal learning initiatives.
• Strong understanding of regulatory and compliance requirements in the banking sector.

Required skills