Jobs at First Bank

Responsibilities
Strategic Communication & Engagement:

• Ensure a minimum of 75% staff awareness and understanding of the Bank’s strategy, products, services, and initiatives at all times.
• Translate complex strategies into clear, relatable, and engaging communication for diverse staff cadres and demographics.
• Build a strong sense of purpose and alignment to the Bank’s mission, vision, and brand pillars.
• Gatekeeper for internal communications dissemination by verifying and validating content for accuracy; checking brand, legal and regulatory implications. This requires a high level of attention to detail and an understanding of the brand, strategic business functions, strategic resource functions, products, regulatory issues, compliance and organizational policies.
• Disseminate strategy across board and adapt overall objectives without dilution using language that drives clarity and understanding. This requires a constant awareness of the pulse of the Bank and a good understanding of the various dynamics within - staff cadres, roles (front office/back office), demographics, psychographics and operational cycles. 
• Ability to tease out WIIFM and WIIFB is also very key.
• Stakeholder management and engagement amongst several business units and resource functions to achieve synergy in communications across the Group to increase awareness and in-depth knowledge, promote cross-selling and achieve uptake in the Bank’s products among staff.
• Design strategy, plan & design content, design campaigns, schedule deployment of the Bank’s products, services and initiatives to facilitate engagement.
• Support the department’s Information Security Management Systems and Business Continuity Management activities to ensure compliance (BCM Champion). 
• Ensure staff compliance with the principles and policies in the Information Security Handbook through message clarity and appropriate frequency of communications

Requirements

• Education: Minimum Education: First Degree in social sciences or related discipline
• Experience: Minimum 5 years’ experience, knowledge of quantitative & qualitative market research, record keeping & customer service relationship management.
• Proficiency in Microsoft word, PowerPoint & Excel is essential.

go to method of application »

Key Responsibilities

• Threat Intelligence Analysis: Gather, analyze, and assess cyber threat intelligence from multiple sources.
• Threat Monitoring: Monitor the evolving threat landscape and identify threats relevant to the Bank.
• Threat Hunting Support: Work with security operations teams to identify indicators of compromise and suspicious activities.
• Intelligence Reporting: Produce timely threat intelligence reports, alerts, and executive briefings.
• Threat Actor Analysis: Research cybercriminal groups, attack campaigns, and emerging techniques.
• Stakeholder Engagement: Provide actionable intelligence to security, risk, and technology teams.
• Strategic Intelligence: Support security planning and decision-making through intelligence-led assessments.
• Continuous Improvement: Enhance threat intelligence processes, tools, and reporting capabilities.

Qualifications & Experience

• Bachelor’s Degree in computer Science, Cybersecurity, Information Technology, Intelligence Studies, or a related discipline.
• Minimum of 5 years of experience in Threat Intelligence, Cybersecurity Operations, Threat Hunting, or related areas.
• Strong understanding of cyber threats, attack techniques, and adversary behavior.
• Experience analyzing threat reports and translating intelligence into actionable recommendations.
• Familiarity with threat intelligence platforms and security monitoring concepts.
• Relevant certifications such as CTIA, CISSP, CEH, GCTI, CISM, or related certifications will be an advantage.

Key Competencies:

• Threat Intelligence Analysis
• Threat Hunting
• Cyber Risk Assessment.

go to method of application »

Key Responsibilities

• Incident Response: Coordinate the management of cybersecurity incidents from detection through resolution.
• Investigation & Analysis: Conduct incident investigations and determine root causes and business impact.
• Containment & Recovery: Support containment, eradication, and recovery activities during security incidents.
• Monitoring & Escalation: Monitor security events and ensure timely escalation of high-risk incidents.
• Coordination: Serve as a central point of coordination during major security incidents.
• Reporting: Prepare incident reports, management updates, and post-incident reviews.
• Process Improvement: Recommend enhancements to incident management procedures and response capabilities.
• Awareness & Preparedness: Support tabletop exercises, simulations, and incident response readiness activities.

Qualifications & Experience

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.
• Minimum of 5 years' experience in Incident Response, Security Operations, Cybersecurity, or a related field.
• Experience handling cybersecurity incidents in a complex technology environment.
• Good understanding of threat detection, security monitoring, and incident handling processes.
• Knowledge of industry frameworks and best practices for incident response.
• Relevant certifications such as GCIH, CISSP, CEH, CISM, or related certifications will be an advantage.

Key Competencies:

• Incident Response
• Incident Coordination
• Problem Solving
• Threat Analysis
• Crisis Management.

go to method of application »

Key Responsibilities

• IT Audit Execution: Conduct reviews of technology processes, systems, infrastructure, and security controls.
• Risk Assessment: Identify technology risks and assess the adequacy of mitigating controls.
• Control Evaluation: Evaluate the effectiveness of IT General Controls (ITGCs), application controls, and cybersecurity controls.
• Regulatory Compliance: Assess compliance with regulatory requirements, internal policies, and industry standards.
• Audit Reporting: Prepare audit reports and present findings and recommendations to management.
• Follow-Up Reviews: Monitor remediation efforts and validate closure of audit findings.
• Advisory Support: Provide control-related guidance to business and technology stakeholders.
• Continuous Improvement: Recommend improvements to technology governance, security, and operational processes.

Qualifications & Experience

• Bachelor's degree in computer science, Information Technology, Accounting, Cybersecurity, or a related discipline.
• Minimum of 5 years' experience in IT Audit, Information Security, Risk Management, or related areas.
• Good understanding of technology risks, IT controls, cybersecurity practices, and regulatory requirements.
• Experience performing audits in financial services or other regulated industries will be an advantage.
• Relevant certifications such as CISA, CISSP, CRISC, CISM, or related certifications will be an advantage.

Key Competencies:

• IT Audit
• Risk Assessment.

go to method of application »

Key Responsibilities

• Digital Investigations: Conduct forensic investigations relating to cybersecurity incidents, fraud, misuse of systems, and policy violations.
• Evidence Preservation: Collect, preserve, and analyze digital evidence while maintaining chain-of-custody requirements.
• Incident Support: Provide forensic support during security incidents and major investigations.
• Malware Analysis: Assist in the examination of malicious software and suspicious activities affecting the Bank's systems.
• Reporting: Produce detailed investigation reports and present findings to relevant stakeholders.
• Regulatory Support: Support legal, compliance, audit, and regulatory investigations where required.
• Forensic Readiness: Maintain forensic tools, procedures, and capabilities to support investigations.
• Threat Analysis: Identify indicators of compromise and support broader security investigations.

Qualifications & Experience

• Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related discipline.
• Minimum of 5 years' experience in Digital Forensics, Incident Response, Cybersecurity Investigations, or related areas.
• Experience conducting computer, network, and mobile device investigations.
• Familiarity with forensic tools and investigative methodologies.
• Strong documentation and reporting skills.
• Relevant certifications such as GCFA, GCFE, CHFI, CEH, CISSP, or related certifications will be an advantage.

Key Competencies:

• Digital Forensics
• Incident Investigation
• Evidence Handling.

go to method of application »

Key Responsibilities

• Database Security Management: Implement and maintain security controls across the Bank's database environments.
• Access Control: Monitor and review database access rights, privileged accounts, and user permissions.
• Security Monitoring: Conduct regular monitoring of database activities to identify potential threats or unauthorized activities.
• Vulnerability Management: Coordinate database security assessments and support remediation of identified vulnerabilities.
• Data Protection: Support the implementation of encryption, masking, and other data protection mechanisms.
• Compliance & Governance: Ensure database environments comply with regulatory requirements, security standards, and internal policies.
• Risk Assessment: Identify and assess database security risks and recommend appropriate mitigation measures.
• Stakeholder Engagement: Work closely with database administrators, infrastructure teams, application teams, and auditors on database security matters.

Qualifications & Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• Minimum of 5 years' experience in Database Security, Database Administration, Information Security, or a related field.
• Good understanding of Oracle, SQL Server, MySQL, PostgreSQL, and enterprise database technologies.
• Knowledge of database security controls, data protection techniques, and database auditing.
• Understanding of regulatory and information security requirements within a regulated environment.
• Relevant certifications such as CISSP, CISM, Oracle Database Security, or related certifications will be an advantage.

Key Competencies:

• Database Security Management
• Data Protection and Encryption
• Vulnerability Management.

go to method of application »

Key Responsibilities

• Application Security: Conduct security assessments of web, mobile, API, and enterprise applications to identify and mitigate vulnerabilities.
• Secure Development: Support the adoption of secure coding practices and ensure security requirements are integrated into software development activities.
• Vulnerability Management: Track, prioritize, and support remediation of application security vulnerabilities identified through testing exercises.
• Security Testing: Coordinate and perform application security reviews, code reviews, penetration testing, and vulnerability assessments.
• DevSecOps Integration: Work with development and DevOps teams to embed security controls within CI/CD pipelines and release processes.
• Risk Advisory: Provide security guidance during solution design, system implementation, and technology transformation initiatives.
• Compliance & Governance: Ensure applications comply with established security standards, regulatory requirements, and internal policies.
• Awareness & Training: Promote application security awareness across technology teams and support secure coding education initiatives.

Qualifications & Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related discipline.
• Minimum of 5 years' experience in Information Security, Application Security, Secure Software Development, or a related area.
• Good understanding of application security principles, secure development practices, and vulnerability management.
• Experience conducting application security assessments and supporting remediation activities.
• Knowledge of OWASP Top 10, API Security, Secure SDLC, and DevSecOps practices.
• Relevant certifications such as CISSP, CSSLP, CEH, OSCP, CISM, or related certifications will be an advantage.
• Experience within financial services or other highly regulated industries is desirable.