ISS:IS Security Officer

About Information Systems Security

Information Systems Security (ISS) team ensures that Cyber Security Risk and Threats are managed through an risk management framework comprising of Information Systems Security Policies, Standards and Guidelines. The bank’s Information Security and Cyber Security Policy and Standards based on various regulatory requirements / guidelines from RBI Gopal Krishna report, cyber security framework, NPCI, IT Act, MAS, HKMA, Aadhaar etc., International regulations and standards such MAS, HKMA, PCI-DSS etc. The policies and standards approved by the Board of Directors encompassing independent identification, measurement and management of risks across the various businesses of the Bank. All compliance related requirements emanating from various regulators and stipulations like legal, regulatory and other standards adopted by the bank are periodically communicated to various stakeholders by way of circulars, office notes, workshops, etc. The bank has developed a comprehensive set of metrics like key performance indicators and key risk indicators for review by Business units, Subsidiaries and Top Management on a regular basis. Quarterly monitoring and reviews are undertaken by the top management for review and necessary action.

About the Role

The Security Officer serves as a subject matter expert for governance and compliance frameworks and regulations, policy development, Identify and monitor non- compliance and escalate when appropriate, Act as the champion for achievement of GRC capabilities, Manage monthly, Quarterly Information Security KRI, Develop, implement, and manage policies specific to GRC capabilities.