BRAC Bank PLC

BRAC Bank PLC is the first and only Bangladeshi bank to be featured in Forbes’ list of the World’s 500 Top Performing Banks. The bank is committed to transforming Bangladesh’s banking sector through trust, innovation, and financial inclusion. As a values-driven financial institution, it provides responsible financial solutions to individuals and businesses while maintaining strong standards of compliance, governance, and transparency. BRAC Bank offers professionals an environment that encourages performance, integrity, and innovation. The bank is inviting applications from qualified and motivated professionals to join its Risk Management Division. Grade: OG-II – SO Key Responsibilities Support the development and implementation of the bank’s information security strategy by establishing and maintaining security policies, standards, procedures, awareness initiatives, risk assessment processes, and incident response capabilities. Design, assess, and review secure cybersecurity architectures, providing appropriate security recommendations for business and technology projects. Facilitate secure digital transformation initiatives by assessing, deploying, and managing advanced cybersecurity technologies and solutions. Manage, maintain, and optimize enterprise security solutions, including XDR, DLP, NBA/NDR, sandboxing, email security gateways, MDM, PAM, MFA/2FA, hard disk encryption, vulnerability management platforms, SIEM, threat intelligence, and endpoint security systems. Conduct security assessments, vulnerability assessments, penetration testing (VAPT), configuration reviews, and compliance audits to identify potential weaknesses and implement risk mitigation measures. Perform ongoing risk assessments, security reviews, and control effectiveness evaluations in accordance with industry best practices and regulatory requirements. Assist in implementing and maintaining compliance with security frameworks and standards, including ISO 27001, NIST, PCI-DSS, OWASP, COBIT, and other relevant guidelines. Oversee cybersecurity vendors and third-party service providers by evaluating solutions, supervising implementations, monitoring performance, and assessing associated risks. Monitor emerging cyber threats, security vulnerabilities, attack methods, and technological developments, recommending appropriate preventive and corrective measures. Work collaboratively with IT, business, and project teams to integrate security requirements throughout the system development and application lifecycle. Prepare cybersecurity reports, performance dashboards, and management presentations, while carrying out other related responsibilities assigned by management.