Head of Cyber Security Assurance Unit

About the role

The Head of Cyber Security Assurance Unit leads the organization’s independent, risk‑based assurance program, ensuring that cybersecurity controls meet regulatory requirements, internal policies and industry standards. Reporting to senior management, this role safeguards the bank’s digital assets by driving continuous improvement of security posture.

Key responsibilities

• Lead and coordinate cybersecurity assurance activities, aligning them with regulatory mandates and best‑practice frameworks.
• Conduct security control reviews, gap analyses and maturity assessments to evaluate effectiveness and identify remediation opportunities.
• Oversee the development and enforcement of security hardening standards and approve high‑risk ITSM changes.
• Plan, execute and monitor internal and external cybersecurity audits, ensuring timely closure of findings.
• Review and endorse cybersecurity awareness and training programs to match risk profile and compliance needs.
• Build, mentor and manage a high‑performing Cybersecurity Assurance team.

Required profile

• Bachelor’s degree in Information Security, Computer Science, IT, Risk Management or related field; advanced degree preferred.
• 5‑8 years of progressive experience in cybersecurity assurance, with at least 3‑5 years in a leadership role, preferably within a financial institution.
• Hands‑on experience coordinating internal/external audits and regulatory examinations.
• Strong stakeholder management and ability to operate within a Three‑Lines‑of‑Defense model.
• Professional certifications such as CISA, CISSP, CISM, CRISC or ISO/IEC 27001 Lead Auditor are highly valued.

Required skills

• ISO/IEC 27001 framework
• NIST Cybersecurity Framework (CSF)
• COBIT
• CIS Controls
• IT General Controls (ITGC)
• Risk assessment and remediation planning
• Security control review and gap analysis
• Cybersecurity maturity assessment