01Overview
Job Purpose
The Head of Security Assurance will be responsible for enabling the security of Digital products and services by design and default. He/She ensures that Mashreqs ICT (Information and communications technology) assets vulnerabilities are identified, risk assessed, reported and tracked for effective remediation by the IT asset owner. The scope of the IT assets includes, but is not limited to, Mashreqs developed code, IT applications and products, IT infrastructure and network.
The Head of Security Assurance will conduct technical risk and exposure assessments, validate security control design and operational effectiveness, provide subject matter expertise on vulnerability management, confirm that IT assets vulnerabilities have been remediated.
The Head of Security Assurance will manage an annual offensive security agenda for the bank. Perform or coordinate penetration tests.
Key Result Areas
Governance
Develop and manage a rolling 3-year Security Assurance roadmap. Update roadmap annually based on changes in business priorities and evolving threat and risk universe.
Develop, implement, and maintain comprehensive policies and procedures related to Security Assurance in alignment with regulatory standards and best practices.
Regularly review and update policies to adapt to evolving security threats and technological advancements.
Engage and Influence Technology departments to ensure they maintain the appropriate tools and workplace to optimise security testing and outcomes.
Leadership and Team Management
Lead and manage the Information Security Assurance team, fostering a culture of continuous learning and improvement, and promoting the highest standards of qualified conduct and ethical behavior.
Risk management
Identify, assess, report and drive mitigation of security risks associated with code, application and infrastructure assets.
Ensuring compliance with regulatory requirements and internal security standards.
Code, Application, and Infrastruct .
