Infosec Risk Senior Engineer

Core Responsibilities:

• Assess the information security risks for new and existing systems through engaging with different stakeholders.
• Analyze the identified risks and assigning risk ratings based on agreed parameters.
• Assign the proper controls in coordination with risk owners to reduce the risks to accepted level according to the bank's risk appetite.
• Assess and recommend security technologies, tools, and processes to enhance the organization's overall security posture.
• Monitor the identified risks status according to the assigned KPI's and KRI's.
• Prepare detailed risk assessment reports and presentations, if required, for senior management outlining risks, recommendations, and progress on security measures.

Technical Competencies:

• Ability to perform risk assessments based on bank's policies.
• Familiarity with PCI DSS, SWIFT Customer Security Controls Framework, Threat Intelligence.
• ISO 27001, CBE Cybersecurity framework and CBE regulations.
• Agile Mindset, with specific Solution Architect (or similar) experience preferred.

Domain Expertise:

• Bachelor's degree of Engineering or Computer Science.
• 3 to 4 years of experience in a relevant field.
• Certificates: CEH, Security+, CRISC, CISM, CISSP are preferred.