​Head: IT Security at Postbank (SOC) Ltd

Job Responsibilities

• Information Security Strategy: Develop and implement comprehensive information security strategies and programs to protect Postbank's information assets.
• Risk Management: Identify, assess, and mitigate information security risks to Postbank
• Compliance: Ensure compliance with Postbank Information Security and Cyber Security policies, relevant laws, regulations, and industry standards, such as PCI-DSS.
• Security Awareness: Develop and implement security awareness programmes to educate employees on information security best practices.
• Incident Response: Develop and implement incident response plans and procedures to respond to security incidents.
• Security Architecture: Design and implement secure architectures for systems, networks, and applications.
• Vendor Management: Manage relationships with third-party vendors and ensure they comply with Postbank's information security policies and procedures.
• Security Operations Center (SOC) Operations: Oversee and manage the day-to-day operations of the SOC, ensuring timely and effective detection, response, and remediation of security incidents.
• Threat Detection: Analyse and interpret security event logs, network traffic, and system data to identify potential security threats and vulnerabilities.
• Security Monitoring: Monitor security event logs, network traffic, and system data to identify potential security threats and vulnerabilities.
• Reporting: Provide regular reporting and metrics to stakeholders on SOC performance, security incidents, and threat intelligence.
• Training: Develop and deliver training programs for SOC analysts and other stakeholders on security best practices, threat intelligence, and incident response
• Encryption keys: When authorised to do so, provide overall management of encryption keys, including key generation, distribution, storage, and revocation 

Qualifications and Experience

Qualifications:

• Bachelor’s degree in computer science, Information Security, or a related field.
• Relevant certifications, such as CompTIA Security+, CISSP, or CISM.

Years of experience:

• 10+ years of experience in information security, including experience in security leadership roles, 10+ years of experience in security operations, incident response, or threat intelligence.
• Banking industry experience, ability to build and maintain relations with banking regulators (FIC, PASA, Bankserv)