Deputy Director (OG-3) - Cyber Security jobs at State Bank of Pakistan (SBP) 2024

@ State Bank of Pakistan (SBP)

Share with details:

🏢 Government Job / Contract

🎓 Bachelor Degree

🌏 Apply Online

🏦 Banking Jobs

♿ Supports Disable Quota

🧑‍🤝‍🧑 Supports Minority Quota

♀ Encourages Females

📍 Pakistan

Job Industry:

Government

Job Type:

Contract

Experience Level:

Mid Level

Submissions begins on:

2024-02-18

Job Posted at:

2024-02-18 07:55:00

Submission Deadline:

2024-03-04

Disable Quota:

Yes

Female Quota:

Yes

Minority Quota:

Yes

Age Limit:

35 years (max)

Eligiblity/ Qualifications:

Place(s) of Posting:

Karachi

Location Type:

Physical / On-site

Applicant Location:

Pakistan (Country)

Country of Appointment:

Pakistan

Employer details:

State Bank of Pakistan (SBP)

Employer Contact Email:

info@sbp.org.pk

Employer Contact Phone:

111-727-111, 021-34546930, 051-8444441

Employer Address:

State Bank of Pakistan
I.I. Chundrigar Road Karachi Pakistan.

Other Jobs from State Bank of Pakistan (SBP):

No more jobs from State Bank of Pakistan (SBP)

Subscribe for Email Alerts

Description:

State Bank of Pakistan
Excellent Career Opportunities

State Bank of Pakistan (SBP), the Central Bank, is looking for talented and energetic candidates for positions of Deputy Director (OG-3) in Cyber Security Department (CySD), based in Karachi.

Key responsibilities of the incumbent will include, but not limited to, the following:
• Manage and maintain IT security policies, standards, and guidelines. Ensure policies are reviewed and updated regularly.
• Plan and perform IT security risk assessments of Bank IT infrastructure, business systems and application on periodic basis to identify, assess, and report cyber security risks.
• Engage with business and IT departments to understand business processes, IT infrastructure, critical data and systems, security risk posture, and risk appetite.
• Recommend appropriate security controls and countermeasures to reduce the risks levels to acceptable level.
• Be a liaison between key stakeholders (IT, Cyber Security, Compliance, Internal Audit, Data Classification, Legal, Procurement and Consultants) and maintain GRC tooling to drive and track compliance with policies and risk mitigation activities.
• Maintain a centralized risk repository containing identified risks and their status for regular follow-ups with risk owners and reporting to senior management and committees.
• Investigate security incidents collaboratively with network, system administration and business teams through log analysis, end-user interviews, and evidence collection.
• Conduct problem management, root cause analysis, and post-mortem reviews after incidents occur.
• Implement an Incident Management Framework for bank-wide IT security incidents.
• Establish and update Incident Response Plan and playbooks based on industry best practices and conduct tabletop exercises for cyber security incident preparedness.
• Maintain a knowledge base and record all IT security incidents following the Enterprise Risk Management Framework and the Bank's Incident Reporting Policy.
• Perform Business Impact Analysis and review Business Continuity Plans and Disaster Recovery Plans for Information Systems and IT infrastructure.
• Conduct cyber awareness and training sessions for different audience groups in the Bank.
• Prepare necessary documents like request for proposal, terms of reference & procurement contracts and manage the execution of cyber security projects in coordination with Procurement, IT and Business Teams.
• Undertake and complete other official tasks assigned by the management.

Compensation:
• Competitive compensation package, as per State Bank rules.

Qualification:

Education:
• Bachelors or Master’s Degree (minimum 16 years of education) in Cyber/Information Security, IT, Computer Science, Computer/Software Engineering, Telecommunication or similar relevant field from reputable HEC recognized domestic or foreign university.

• CISSP, CRISC, CHFI, ECIH or any other relevant IT / Cyber Security certifications would be preferred.

Age:
• Maximum 35 years, as on the date of advertisement.

Experience:
• At least five (05) years post-qualification experience of working in Cyber Security. Preference will be given to candidates having hands on experience of IT Risk Assessments, SOC Operations, Incident Response and Digital Forensics.

Employment Type:

This job offered by State Bank of Pakistan (SBP) is a Contractual position. Most of the jobs on contractual positions are renewed depending the need and performance of the employee.

Applications begins on:

The interested candidates/ job seekers can apply for the post of Deputy Director (OG-3) - Cyber Security at State Bank of Pakistan (SBP) from February 18, 2024

Last Date to Apply:

The last date to apply for the post of Deputy Director (OG-3) - Cyber Security at State Bank of Pakistan (SBP) is March 04, 2024.

How To Apply:

• Interested candidates meeting the above-stated eligibility criteria may submit their applications online on https://www.sbp.org.pk/careers/status.asp. Last date of application submission is March 4, 2024.
• Applications, which are not in accordance with defined requirements in the advertisement, will not be entertained. Only shortlisted candidates will be contacted.

• We are an Equal Opportunity Employer. Females, candidates from minorities, transgender persons and persons with disability are encouraged to apply.

• Any candidate who misinforms, attempts to influence the recruitment process in any manner, tries to obtain support for his/her candidature by inappropriate means or tampers with evidence of his/her age, educational and other certificates, shall be disqualified from the current and any future recruitment process at the Bank; even if the candidate is otherwise eligible.

Submit your application:

Start your new career with just one click! Apply online for this exciting opportunity.

Apply online for Deputy Director (OG-3) - Cyber Security (State Bank of Pakistan (SBP))

Tags: Computer Science, Management, OG-3, SBP

Apply for Deputy Director (OG-3) - Cyber Security at State Bank of Pakistan (SBP)

About State Bank of Pakistan (SBP)

The State Bank of Pakistan (SBP) is incorporated under the State Bank of Pakistan Act, 1956, which gives the Bank the authority to function as the central bank of the country. The SBP Act mandates the Bank to regulate the monetary and credit system of Pakistan and to foster its growth in the best national interest with a view to securing monetary stability and fuller utilization of the country’s productive resources.

Subsidiaries of the SBP
The SBP holds “three” fully owned subsidiaries to augment its functions. These are:

SBP-Banking Services Corporation (SBP-BSC)
Established under the SBP-BSC Ordinance 2001, SBP-BSC supports SBP in performing functions such as handling of currency and credit management, facilitating the inter-bank settlement system, and sale/purchase of savings instruments of the Government on behalf of Central Directorate of National Savings. SBP-BSC also collects revenue and makes payments for and on behalf of the Government. It also carries out operational work relating to development finance, management of public debt, foreign exchange operations and export refinance. The Board of Directors of SBP-BSC, chaired by the Governor SBP, comprises of all members of the Central Board of SBP and the Managing Director of SBP-BSC.

SBP-BSC consists of 16 field offices in Pakistan with the head office in Karachi.

National Institute of Banking and Finance (NIBAF)
NIBAF is the training arm of SBP, providing executive development trainings to new inductees and various levels of SBP employees. The subsidiary also conducts international courses on central and commercial banking in collaboration with the federal Government. Furthermore, NIBAF offers training to SBP-BSC and other financial institutions. NIBAF is incorporated under Companies Ordinance, 1984 and has a separate Board of Directors.

NIBAF is located in Islamabad with an office in Karachi.

Deposit Protection Corporation (DPC)
Deposit Protection Corporation (DPC) has been established as a wholly owned subsidiary of SBP under the DPC Act 2016. Upon commencement, this entity will be responsible to provide protection of deposits of member financial institutions operating in Pakistan. The objective of DPC is to compensate the depositors to the extent of protected deposits in the event of failure of a member Financial Institution. The limit of protected deposits shall be determined by DPC and will be announced in due course.
For the purpose of protecting depositors of Islamic Banks and branches, a separate Shariah compliant mechanism of deposit protection shall be put in place.

Frequently Asked Questions (FAQs)

Q: What are the key responsibilities of Deputy Director (OG-3) - Cyber Security at State Bank of Pakistan (SBP)?

A: Key responsibilities of the incumbent will include, but not limited to, the following:
• Manage and maintain IT security policies, standards, and guidelines. Ensure policies are reviewed and updated regularly.
• Plan and perform IT security risk assessments of Bank IT infrastructure, business systems and application on periodic basis to identify, assess, and report cyber security risks.
• Engage with business and IT departments to understand business processes, IT infrastructure, critical data and systems, security risk posture, and risk appetite.
• Recommend appropriate security controls and countermeasures to reduce the risks levels to acceptable level.
• Be a liaison between key stakeholders (IT, Cyber Security, Compliance, Internal Audit, Data Classification, Legal, Procurement and Consultants) and maintain GRC tooling to drive and track compliance with policies and risk mitigation activities.
• Maintain a centralized risk repository containing identified risks and their status for regular follow-ups with risk owners and reporting to senior management and committees.
• Investigate security incidents collaboratively with network, system administration and business teams through log analysis, end-user interviews, and evidence collection.
• Conduct problem management, root cause analysis, and post-mortem reviews after incidents occur.
• Implement an Incident Management Framework for bank-wide IT security incidents.
• Establish and update Incident Response Plan and playbooks based on industry best practices and conduct tabletop exercises for cyber security incident preparedness.
• Maintain a knowledge base and record all IT security incidents following the Enterprise Risk Management Framework and the Bank\'s Incident Reporting Policy.
• Perform Business Impact Analysis and review Business Continuity Plans and Disaster Recovery Plans for Information Systems and IT infrastructure.
• Conduct cyber awareness and training sessions for different audience groups in the Bank.
• Prepare necessary documents like request for proposal, terms of reference & procurement contracts and manage the execution of cyber security projects in coordination with Procurement, IT and Business Teams.
• Undertake and complete other official tasks assigned by the management.