Security Strategy & Architecture
Define and implement enterprise-wide cyber security strategy aligned to the bank's business and technology landscape
Design and govern secure architectures across:
Network infrastructure (on-prem and hybrid connectivity)
Cloud platforms (Azure, AWS, GCP)
Identity and access management ecosystems
Core banking, trading, and payment systems
Embed security-by-design and zero trust principles across all layers
Core Security Domains Ownership
Lead and provide SME oversight across key cyber domains:
Network Security (firewalls, IDS/IPS, segmentation, secure connectivity, DDoS protection)
Cloud Security (secure configuration, CSPM, workload protection, cloud-native controls)
Identity & Access Management (IAM/PAM) (RBAC, MFA, privileged access, identity governance)
Endpoint & Infrastructure Security (EDR/XDR, device hardening, patching)
Application Security (secure SDLC, DevSecOps, API security, code scanning)
Data Security (encryption, tokenisation, DLP, data classification)
Lead threat modelling and risk assessments across critical banking systems and infrastructure
Define mitigation strategies aligned to frameworks (NIST, ISO 27001, CIS)
Oversee vulnerability management, penetration testing, and security assurance activities
Security Operations & Incident Response
Provide oversight on SOC, SIEM, SOAR, and threat detection capabilities
Enhance monitoring through AI-driven anomaly detection and behavioural analytics
Define and lead incident response strategies for cyber events (ransomware, breaches, insider threats, DDoS)
Ensure compliance with relevant regulations and standards:
DORA (Digital Operational Resilience Act)
PRA / FCA cyber resilience requirements
GDPR and data protection regulations
SWIFT Customer Security Programme (CSP)
Support audits, regulatory reviews, and cyber resilience testing
Third-Party & Supply Chain Security
Assess and manage cyber risk across vendors, fintech partners, and infrastructure providers
Define third-party security standards, onboarding controls, and continuous monitoring
Stakeholder Management & Advisory
Act as trusted advisor to CIO, CISO, Risk, and business stakeholders
Translate technical cyber risks into business and operational impact
Support RFPs, client engagements, and strategic cyber transformation initiatives
