Officer/Associate Manager, System Security and Risks, Information Security

• Candidates should possess at least one recognized professional certification, such as CEH/CPEH, CHFI, GCIA/GCIH, CPT/LPT, CISSO/CCISO, CISA, or ISO 27001 Lead Implementer/Auditor.

• A minimum of 2 years of hands-on experience in Information Security, or at least 3 years of experience in Information Systems or IT Infrastructure with substantial exposure to network and infrastructure security.

• Practical experience in implementing, maintaining, and managing information security programs and controls.

• Strong knowledge of security methodologies, frameworks, technical security solutions, security policies, standards, compliance requirements, security assessments, and control effectiveness evaluation.

• Familiarity with relevant cybersecurity frameworks and standards, including NIST, OWASP, PCI-DSS, ISO 27001, and COBIT.

• Strong analytical and innovative thinking skills, with the ability to manage multiple projects simultaneously, solve complex problems, make informed decisions, and achieve expected outcomes.

• Excellent written and verbal communication skills, including the ability to prepare reports, presentations, and technical documentation for diverse audiences.

• Self-motivated and customer-focused, with strong teamwork abilities and a proven capacity to meet deadlines.

BRAC Bank PLC is the first and only Bangladeshi bank to be featured in Forbes’ list of the World’s 500 Top Performing Banks. The bank is committed to transforming Bangladesh’s banking sector through trust, innovation, and financial inclusion. As a values-driven financial institution, it provides responsible financial solutions to individuals and businesses while maintaining strong standards of compliance, governance, and transparency. BRAC Bank offers professionals an environment that encourages performance, integrity, and innovation.

The bank is inviting applications from qualified and motivated professionals to join its Risk Management Division.

Grade: OG-II – SO

Key Responsibilities

• Support the development and implementation of the bank’s information security strategy by establishing and maintaining security policies, standards, procedures, awareness initiatives, risk assessment processes, and incident response capabilities.

• Design, assess, and review secure cybersecurity architectures, providing appropriate security recommendations for business and technology projects.

• Facilitate secure digital transformation initiatives by assessing, deploying, and managing advanced cybersecurity technologies and solutions.

• Manage, maintain, and optimize enterprise security solutions, including XDR, DLP, NBA/NDR, sandboxing, email security gateways, MDM, PAM, MFA/2FA, hard disk encryption, vulnerability management platforms, SIEM, threat intelligence, and endpoint security systems.

• Conduct security assessments, vulnerability assessments, penetration testing (VAPT), configuration reviews, and compliance audits to identify potential weaknesses and implement risk mitigation measures.

• Perform ongoing risk assessments, security reviews, and control effectiveness evaluations in accordance with industry best practices and regulatory requirements.

• Assist in implementing and maintaining compliance with security frameworks and standards, including ISO 27001, NIST, PCI-DSS, OWASP, COBIT, and other relevant guidelines.

• Oversee cybersecurity vendors and third-party service providers by evaluating solutions, supervising implementations, monitoring performance, and assessing associated risks.

• Monitor emerging cyber threats, security vulnerabilities, attack methods, and technological developments, recommending appropriate preventive and corrective measures.

• Work collaboratively with IT, business, and project teams to integrate security requirements throughout the system development and application lifecycle.

• Prepare cybersecurity reports, performance dashboards, and management presentations, while carrying out other related responsibilities assigned by management.