Developing an independent opinion on the businesses’ management of risk, challenging areas of mitigation or control weakness, proactively identifying and coordinating assurance activities based on the current and future risk profile of the business and contributing the KBZ Group's vision to be the best bank for the customers .Delivering of proactive support, constructive challenge to the business and enabling sustainable growth for KBZ Banking Group. Currently taking care of Security… Show more Developing an independent opinion on the businesses’ management of risk, challenging areas of mitigation or control weakness, proactively identifying and coordinating assurance activities based on the current and future risk profile of the business and contributing the KBZ Group's vision to be the best bank for the customers .Delivering of proactive support, constructive challenge to the business and enabling sustainable growth for KBZ Banking Group. Currently taking care of Security Operation Center, VAPT team and ICT Compliance/Audit teams in the bank. - Setting up the SOC, VAPT , ICT Compliance teams for the Bank and developing the frameworks, roadmaps and policies within. - Building a strong relationship between the newly formed Security Teams and existing ICT Teams, Business Teams in the KBZ group and supporting Senior Executives. - Closing the gaps of IT Risks and Cyber Risks within financial services by applying and paralleling with relevant legislation and regulation affecting IT Risk within financial services and the relevant risk management frameworks such as SOX, ISO27001 and PCIDSS. - Develop bespoke and innovate approaches to make sure that cyber and IT risks are a core part of strategic programmes- Good technical working knowledge of IT systems, including, operating systems, databases, networking solutions, security tools, applications and application frameworks - Knowledge of emerging Banking technologies and associated risks- Leading the Security Projects such as ISO27001 Implementation, PCIDSS Implementations, Enterprise Endpoint Security Suites roll outs, Implementing of Server Security Suites, Implementing of Change Management and Ticketing Systems, SOC primary tools for log monitoring, conducting Forensic activities .. etc and many more ad hoc Security projects. Show less