Cyber Security Risk Managment

Embark on a journey where your unique contributions are celebrated, and your professional growth is embraced. At ADCB, we nurture a diverse, inclusive community where every voice is valued.

About the business area - Group Risk Management

ADCB prioritises a disciplined approach to risk, recognising its fundamental importance to the Bank’s long-term organisational and financial resilience. Group Risk Management oversees the implementation of ADCB's risk objectives, identifying and addressing gaps in the bank's risk infrastructure/framework. Their responsibilities include nurturing the independence of the risk function, establishing provisioning policies, and introducing changes to energise risk awareness among front office personnel and decision-makers.

Continuously tuning the risk organisation in line with market best practices, they manage ADCB's portfolio and associated risks to international standards, while establishing a clear risk culture across all areas of operation.

In this role, your key responsibilities include
:

• To manage and implement ADCB’s cyber security and incident response strategy by designing and implementing security measures, conducting vulnerability assessment and monitoring and managing the response to cybersecurity incidents to ensure the Bank operates within a pre-defined risk appetite to mitigate any foreseeable cyber security threats
• Evaluate technical risk, design, architecture, feasibility analysis, vendor review and security controls of all infrastructure technologies and business systems being implemented in the Bank in order to identify non-compliance areas and address these accordingly
• Manage programmes and projects in order to implement new information security products, tools, and innovations that would augment the controls and improve user experience
• Research the latest trends in threats, threat actors, industry security news, global security incidents and trends to ensure that the Bank is protected against similar scenarios and design, develop and implement technical information security frameworks in line with the required standards
• Manage and implement the vulnerability management lifecycle and penetration testing on the Banking infrastructure and systems to ensure that all the Bank’s technology systems are continuously protected against threats
• Manage the implementation of information security policies, procedures and technical standards in order to prevent unauthorised disclosures, unauthorised use, inappropriate modification, premature deletion and unavailability of data and business/infrastructure systems
• Develop and ensure technology baselines for the secure management of systems across all platforms, including development and maintenance of encryption standards, intrusion detection strategy and network authentication to ensure all systems are secure and follow Banks requirements
• Manage an effective internal SOC to ensure effective monitoring is carried out by SOC staff for any unauthorised use or leakage of sensitive data from the Bank, phishing attacks, social media abuse and other malicious activities that could bring about reputational damage for the Bank or unauthorised access to Bank’s critical systems
• Build capabilities within the SOC for advanced malware analysis, forensics and detection of advanced persistent threats to ensure security of the systems
• Design and implement a continuous monitoring strategy for the Bank’s information systems according to the threat landscape for evidence of malicious activity or intrusion attempts to ensure ongoing security of the systems
• Run programmes for the implementation of automated tools in order to bring efficiencies, log collection, correlation, and analysis tools for effective monitoring of security
• Provid…