Manager – Information Security Operations

Job Description

Location: Colombo, Sri Lanka

Company: People’s Bank

About Us:
People’s Bank, a premier bank in Sri Lanka with the largest customer base, has been providing innovative financial solutions to its diversified clientele for over six decades. We offer a conducive environment for those who strive for excellence and believe in professionalism.

Position Overview:
We are seeking a talented and dynamic individual to join our team as the Manager of Information Security Operations. This role is crucial in enhancing our information security program and ensuring the safety and integrity of our systems.

Key Responsibilities:

• Collaborate with the CISO and key stakeholders to enhance the current information security program, leading and managing security projects to ensure they are completed on time, within scope, and within budget.
• Support security operations functions, including but not limited to SIEM, DLP, PAM, and other security implementations and administration as required.
• Independently review, analyze, and investigate security alerts/events via sophisticated cybersecurity/event management tools to identify areas for improvement and provide recommendations and support for incident response/recovery where necessary.
• Oversee internal SOC operations by monitoring security incidents and ensuring prompt analysis and resolution within the defined timeframe, while leading the incident response team in managing and resolving these incidents.
• Develop strategies to anticipate emerging threats, detect potential attacks, and strengthen the Bank’s defenses, while providing regular updates to top management on new security threats and evolving threat vectors.
• Evaluate information security risks and vulnerabilities involved in system changes and the launch of new technologies/products/business activities, making appropriate recommendations.
• Develop meaningful security metrics and reports that accurately reflect the organization’s security posture, enabling informed, risk-based decision-making. Generate actionable, threat-based reports based on security testing results.
• Continuously research and evaluate emerging security threats and trends, recommending and implementing appropriate security controls.

Qualifications:

• Bachelor’s or Master’s degree in Information Security or Information Technology specialized in Information Security from a recognized university or degree-awarding institute.
• Alternatively, a Bachelor’s or Master’s degree in Information Technology with at least one of the following professional certifications:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Ethical Hacker (CEH)

Experience:

• Minimum of 3 years of proven work experience in information or system security engineering, security assessments, SOC operations, or related functions.
• Hands-on experience in vulnerability assessments and penetration testing.
• Experience with SIEM technologies is an added advantage.
• Strong understanding of information security principles, practices, and technologies.
• Knowledge and experience in E-Commerce, M-Commerce, Payment Card Security, compliance, and regulatory/industry standard certifications (PCI DSS, ISO 27001, CBSL Directions).
• Sound knowledge of industry trends, emerging technologies, threats, and specific threats targeting financial institutions.
• Excellent analytical and problem-solving skills.
• Excellent written and verbal communication skills.

Age:

• Preferably below 45 years as of the closing date of applications.

Selection Method:

• Shortlisted applicants based on the stipulated qualifications will be called for an interview. The appointment will be made on a contract basis, and performance will be evaluated annually.

Remuneration:

• An attractive and negotiable remuneration package commensurate with qualifications and experience will be offered to the selected candidate.

How to Apply:
Please send details of achievements and experience relevant to the job applied for, along with your curriculum vitae, copies of certificates, and contact numbers of two non-related referees. The post applied for should be stated in the subject line of the email and sent to itrecruit@peopleabank.lit on or before 24.03.2025.

An email confirmation of receipt will be sent upon receipt of the curriculum vitae. If a confirmation has not been received within a reasonable period, you may inquire about the application at 0112481542/0112481416.

All applications will be treated in strict confidentiality, and any form of canvassing will be regarded as a disqualification. Incomplete and non-complying applications will be rejected.

Note:
The Bank reserves the right to decide the number of vacancies, postponement or cancellation of recruitment, or any other information not included in the advertisement.

Contact:
Deputy General Manager (Human Resources)
People’s Bank – Head Office
No. 75, Sir Chittampalam A. Gardiner Mawatha, Colombo – 02.

Join Us and Be Part of a Secure Future!