IT Security Assurance Senior Specialist Full Time NEW

The Function Purpose

Support the IT Security Assurance function by implementing security solutions and conducting assessments that protect the bank’s applications, systems, and digital platforms. This role contributes to embedding security across the software development lifecycle (SDLC), digital transformation initiatives, and third-party solutions, in line with the bank’s information security strategy.

Main Responsibilities

• Implement enterprise information assurance and security standards, policies, and procedures in line with regulatory and industry requirements.
• Support the development and continuous improvement of the security assurance framework, methodologies, and practices.
• Provide accurate documentation and reporting of assessment findings, risks, and remediation progress to management.
• Perform security assessments of applications (web, mobile, APIs, cloud-native, and digital platforms).
• Assist in integrating security controls and requirements into the SDLC and DevSecOps pipelines.
• Conduct design and code reviews to identify vulnerabilities and risks.
• Validate remediation of findings from vulnerability scans, penetration tests, and audits.
• Collaborate with development, DevOps, and operations teams to address risks and strengthen application security.
• Conduct vulnerability scans, threat modeling, and risk assessments across IT systems and applications.
• Identify and report potential weaknesses, threats, and vulnerabilities in applications and supporting infrastructure.
• Participate in third-party and vendor security assessments to ensure compliance with the bank’s requirements.
• Support compliance initiatives with frameworks such as ISO 27001, NIST, OWASP, PCI DSS, and local regulations.
• Support the deployment, configuration, and maintenance of security technologies (e.g., WAF, IDS/IPS, endpoint security, and encryption tools).
• Contribute to security incident response activities, including investigation, containment, and recovery.
• Ensure IT systems and digital platforms remain secure and functional.
• Work closely with the IT Security Assurance Team Lead to execute assigned tasks and projects.
• Partner with IT, business, and development teams to embed security practices into projects and initiatives.

Background

• Bachelor’s degree in computer science, Information Technology, or a related field.
• 4+ years of relevant experience in information security roles.