Cyber Security Manager (Risk & Governance)

About the Company

Established in Thrissur during the Swadeshi movement, We are one of South India’s earliest and most trusted banks. Today, we are redefining banking through technology, innovation, and digital-first solutions. With a strong focus on IT-led transformation, we deliver secure, seamless, and customer-centric financial services. Our teams work at the forefront of fintech innovation, driving automation, analytics, and next-gen digital platforms that shape the future of banking.

• SCALE OF APPOINTMENT

IBA Scale III/IV

• ELIGIBILITY CRITERIA (as on 31.07.2025)

Work Experience

Minimum 6 +

Minimum Educational Qualification

B.Tech / B.E / MCA / M.Sc (IT or Cyber Security related specialisations)/ BCA / B.Sc (IT or Cyber Security related specialisations ) from a recognized University with a minimum score of 50%

Or equivalent qualifications

• TERMS OF EMPLOYMENT

The appointment will be on IBA pay scale (probation 1 year) or on fixed term contract

Cyber Security Risk Manager

• Policy & Framework:

  Development and review of the Bank's Outsourcing/Third Party/Vendor Risk Management Framework and the Risk Assessment Templates.

• Implementation

  of the framework in coordination with Internal and External Stakeholders

• Risk Identification & Assessment:

  Identify and assess IT and cybersecurity risks across critical applications and infrastructure. Highlight control gaps, suggest mitigation plans, and ensure compliance with internal and external standards.

• Risk Mitigation & Control

  :
  Develop and implement risk management policies and controls. Align cybersecurity services with business needs to improve performance and adapt to evolving threats.

• Compliance & Regulatory Oversight:

  Ensure compliance with CERT-IN, ISO 27001, RBI, and other relevant standards. Establish metrics to demonstrate the value and impact of cybersecurity initiatives.

• Risk Monitoring & Reporting:

  Monitor security posture and track risks. Report key metrics and improve processes to enhance operational efficiency and service quality.

• Incident Response & Crisis Management:

  Lead response efforts, conduct root cause analysis, and ensure continuity during cybersecurity incidents.

• Incident Management:

  Conduct audits and threat assessments to detect violations and inefficiencies. Stay updated on emerging threats and technologies to strengthen cybersecurity posture.

• Reporting & Communication:

  Create clear reports on system performance and incidents. Provide risk-based recommendations to guide business decisions.

• Third-Party Risk Management:

  Evaluate and manage vendor risks. Integrate cybersecurity practices into business operations to support strategic objectives.
• Any other work assigned from time to time.

• CORE COMPETENCIES/CERTIFICATION

• Minimum 6 +

  Years

  of experience in IT related area of which

  3 + Years

  in the Cyber Security/Information Security area with a strong focus on governance, risk, and compliance.
• In-depth knowledge of cybersecurity principles, frameworks (NIST, ISO 27001, COBIT), and regulatory requirements is preferred.
• Professional certifications such as

  CISSP, CISM, CRISC, CISA

  are preferred.
• Proven experience in managing cybersecurity programs and stakeholder engagement.

1. PLACE OF POSTING

Ernakulam/Bangalore (Liable for transfer anywhere in India at the sole discretion of the Bank.)