Information Cyber Security (ICS) - Policy & Awareness Officer at First Bank

Job ref.: 1900002U
Location: Lagos
Shift: Standard
Schedule: Regular
Job type: Full-time
Organization: Chief Risk Officer Directorate
Grade Range - From : Assistant Banking Officer  Grade Range - To : Senior Banking Officer

Descriptions

• Develops policy, framework, security baselines and procedures for the information/Cybersecurity governance and risk management program, including control document reviews, stakeholder review/sign-off and post-approval communication.
• Plan and coordinate independent Vulnerability Assessment and Penetration Test (VAPT)
• Monitors compliance with security policies, standards, guidelines and procedures
• Continuously communicate and ensure staff and third-parties are aware of information and cyber security as it relates to their roles and/or services
• Identify potential threats and vulnerabilities for business processes, associated data and supporting capabilities to assist in the evaluation of enterprise risk
• Coordinate the development and ongoing maintenance of Information and Cyber security (ICS) policies and procedures
• Empower staff bank-wide through periodically Information and cyber security risk awareness, training and publications including role based and privileged user training
• Ensure Information Security and Cybersecurity policy, framework and security baselines are enforced and report exceptions
• Develop an awareness program and conduct training to ensure that stakeholders understand risk and contribute to the risk management process and to promote a risk-aware culture
• Develop and communicate security awareness program through difference awareness sources: Newsletters, E-Learning (Computer Base Training), Facilitator Led training, E-flyers etc.

Qualifications
Education:

• Minimum Education: First Degree in Computer Science/Engineering
• Professional Certifications: ISO27001 Lead Implementer, ISO27032 Cyber Security Lead manager or any Cybersecurity Professional Certifications

Experience:

• Minimum experience - 5 years’ experience in facilitating and conducting security awareness and policy development related to PCI-DSS, ISO 27001, and Cybersecurity Framework