Officer/Associate Manager

চাকরির বিবরণ

BRAC Bank is hiring an Officer/Associate Manager, System Security and Risks (Job Number 26000081). The role contributes to the bank's information security strategy, designs and reviews secure architectures, administers enterprise security solutions (XDR, DLP, NBA/NDR, sandboxing, email security, MDM, PAM, MFA, disk encryption, vulnerability management, SIEM, threat intelligence, endpoint security), conducts VAPT and compliance reviews, and supports ISO 27001, NIST, PCI-DSS, OWASP and COBIT compliance. Posted 19 Oct 2026; unposting date 26 Oct 2026. Apply through BRAC Bank's own careers portal (Taleo).

দায়িত্ব

• Contribute to the organization's information security strategy by developing and maintaining security policies, standards, procedures, awareness programs, risk assessments, and incident response capabilities
• Design and review secure cybersecurity architectures and provide security recommendations for business and technology initiatives
• Support secure digital transformation programs by evaluating, implementing, and managing next-generation security technologies and solutions
• Administer and optimize enterprise security solutions, including XDR, DLP, NBA/NDR, sandboxing, email security gateway, MDM, PAM, MFA/2FA, hard disk encryption, vulnerability management platforms, SIEM, threat intelligence, and endpoint security
• Conduct security assessments, vulnerability assessments, penetration testing (VAPT), configuration reviews, and security compliance reviews
• Perform continuous risk assessments, security reviews, and control effectiveness evaluations aligned with industry standards and regulatory requirements
• Support compliance initiatives related to ISO 27001, NIST, PCI-DSS, OWASP, COBIT, and other applicable security frameworks
• Manage cybersecurity vendors and third-party service providers, including solution evaluation, implementation oversight, performance monitoring, and risk assessments
• Stay current with emerging cyber threats, vulnerabilities, attack techniques, and security technologies, and recommend remediation measures
• Collaborate with IT, business, and project teams to integrate security requirements throughout the system and application lifecycle
• Prepare security reports, dashboards, and management presentations, and perform other cybersecurity-related duties as assigned

যোগ্যতা

• Minimum graduation in Information Security, Cyber Security, Computer Science, or a related field from a UGC-approved university with a satisfactory academic track record
• One or more industry-recognized certifications such as CEH/CPEH, CHFI, GCIA/GCIH, CPT/LPT, CISSO/CCISO, CISA, ISO 27001 Lead Implementer/Auditor
• Minimum 2 years of direct Information Security experience, or minimum 3 years of Information Systems/Infrastructure experience with strong exposure to network and infrastructure security
• Experience in implementing and managing security programs and controls
• Strong understanding of security methodologies and frameworks, technical security solutions, security policies, standards, compliance requirements, security assessments and control effectiveness measurement
• Familiarity with NIST, OWASP, PCI-DSS, ISO 27001, COBIT
• Ability to analyze data, drive innovation, and handle multiple projects simultaneously
• Strong written and verbal communication skills, including reports, presentations and documentation
• Self-propelled, customer-centric team player capable of meeting deadlines

দক্ষতা

• DLP
• Information Security
• ISO 27001
• NIST
• PAM
• PCI-DSS
• SIEM
• VAPT