Information Security Consultant

Responsibilities

• Maintain and update Security Policies, Standards, Procedures, and related addendums.
• Review information security and compliance requirements as per regional regulations including ISO 27001, GDPR, PCI DSS, Central Bank guidelines, and any other applicable frameworks.
• Assess new regulatory security legislations, interpret requirements, and monitor implementation action plans.
• Coordinate regulatory security audits for the Bank's international locations.
• Review BRDs, solution designs, and conceptual designs to ensure alignment with Bank security policies.
• Conduct Technology Risk Assessments, Third-Party Risk Assessments, and review RCSA remediation activities.
• Support GSO and Business Units in meeting information security compliance objectives.
• Identify and escalate potential security issues, breaches, or violations; develop and track remediation plans with local/overseas branches and business teams.
• Liaise with local regulatory authorities and the compliance department for updates on new regulatory requirements.
• Coordinate and drive closure of open audit observations across international locations.
• Participate in the Bank's CSIRT for information security incident and data breach handling.
• Review regulatory compliance circulars/notices and assess required security controls.