IT Security Assurance Senior Specialist

About the role

This role supports the IT Security Assurance function by implementing security solutions and carrying out assessments that protect the bank's applications, systems and digital platforms. It helps embed security across the software development lifecycle, digital transformation initiatives and third-party solutions, in line with the bank's information security strategy.

Key responsibilities

• Implement enterprise information assurance and security standards, policies and procedures in line with regulatory and industry requirements.
• Support the development and continuous improvement of the security assurance framework, methodologies and practices.
• Provide accurate documentation and reporting of assessment findings, risks and remediation progress to management.
• Perform security assessments of web, mobile, API, cloud-native and digital platform applications.
• Integrate security controls and requirements into the SDLC and DevSecOps pipelines, and conduct design and code reviews to identify vulnerabilities.
• Validate remediation of findings from vulnerability scans, penetration tests and audits, and work with development, DevOps and operations teams to address risks.
• Conduct vulnerability scans, threat modeling and risk assessments, and report weaknesses and threats.
• Participate in third-party and vendor security assessments, and support compliance with ISO 27001, NIST, OWASP, PCI DSS and local regulations.
• Support the deployment, configuration and maintenance of security technologies such as WAF, IDS/IPS, endpoint security and encryption tools.
• Contribute to security incident response, including investigation, containment and recovery.
• Work closely with the IT Security Assurance Team Lead and partner with IT, business and development teams to embed security practices.

Required profile

• Bachelor's degree in computer science, Information Technology or a related field.
• 3+ years of relevant experience in information security roles.