Experience with identifying and evaluating potential areas of Information Security threat by assessing the probability and impact, and implementing associated mitigations.
Experience with monitoring and contributing to the implementation of the Information Security strategy
Experience with evaluating the adequacy and effectiveness of internal controls relating to Information Security risks
Experience with ensuring appropriate procedures, policies and processes are in place, and aligned and agreed with relevant stakeholders
Developing appropriate, pragmatic strategies to deliver effective controls and Information Security management objectives and implementation across the bank
Managing client relationships and ensuring management focuses on the Information Security agenda
Audit experience or implementation experience for the below Identity and Access concepts
Identity & Access Management: Authentication; Access management & control.
IAM concepts: least privilege, SoD, access certifications, and privileged access management
Knowledge of control frameworks and regulations (ISO 27001/27002, NIST, SOX, SOC 1/2, GDPR)
Familiarity with IAM and PAM technologies (e.g., Active Directory, Azure AD/Entra ID, CyberArk)
Joiner/Mover/Leaver (JML) automation using IAM tools integrated with HR systems
Role-based or policy-based access models enforcing least privilege and approved access paths
SSO and MFA controls