INFORMATION SECURITY OFFICER

INFORMATION SECURITY OFFICER

INFORMATION SECURITY OFFICER

Position Description:

The National Commercial Bank of Anguilla Ltd (NCBA), the leading financial institution in Anguilla, is seeking a suitably qualified and experienced individual to fill the position of Information Security Officer in our Management Information Systems Department.

The successful candidate will be responsible for designing, implementing and testing NCBA’s security framework and preventing unauthorised access and protecting information from security breaches. The position holder also informs and trains users of measures to protect NCBA’s security posture.

Key Accountabilities Include but are not limited to:

1. Coordinate the continuous development, implementation and updating of security and privacy policies, standards, guidelines, processes and procedures in compliance with the relevant legislation and standards for the Bank’s information systems.

2. Develop and manage the frameworks, processes, tools necessary for Information Technology (IT) to properly manage risk and to make risk-based decisions related to IT activities.

3. Proactive identification and mitigation of IT risks as well as responding to observations identified by third party auditors or examiners while assisting in the development of periodic reports and dashboards presenting the level of controls compliance and current IT risk posture.

4. Conduct periodic internal IT audits of processes and control and put forward remediation recommendations. Ensure overall IT compliance with regulatory requirements through proactive planning and communication, ownership and relationships.

5. Identify acceptable levels of IT risk and assist with action plans, policy and procedural changes for risk mitigation.

6. Facilitate information systems security management education and training in regulatory and industry standards for all employees.

7. Coordinate information security incident response and reporting plan for events or exploited vulnerabilities including unauthorized system or network access, denial of service, inappropriate data access, data corruption, and/or collection of private or confidential information.

8. Act as ombudsman for disputes, requests for exceptions and complaints regarding bank wide information systems security policies, practices and related issues.

9. Work as a liaison with the relevant authorities requiring information and reports on security incidents.

10. Monitor all operations and infrastructure.

11. Maintain all security tools and technology/ systems.

12. Monitor internal (employees) and external (vendors) policy and regulatory compliance.

13. Work with different departments in the organization to reduce risk.

The ideal candidate must possess the following qualifications and background:

• BSc in Computer Science, Computer Information Systems, or Information Systems, business administration or closely related field preferred

• 5 years experience in information security

Certifications:

○ CompTIA Security+

○ Certified Information System Security Professional (CISSP)

○ NIST Cybersecurity Framework (NCSF)

○ Certified Cloud Security Professional (CCSP)

○ CEH (Certified Ethical Hacker)

To Apply Please forward your resume and cover letter, outlining how your skills and experience meet the qualifications and requirements of the position under confidential cover, to the attention of the Human Resources Department.

Only short-listed candidates will be contacted.