IT Security Analyst

Information Security Operations

• Monitor IT systems, networks, and applications for security threats and vulnerabilities.
• Implement and maintain security controls, tools, and configurations.
• Support secure system configurations across CBS, applications, servers, and networks.
• Ensure compliance with approved IT security standards and policies.

Cyber Risk & Incident Management

• Detect, analyze, and respond to information security incidents and cyber threats.
• Escalate material security incidents, cyber risks, and control weaknesses to the CRO in a timely manner.
• Support incident investigation, root-cause analysis, and remediation actions.
• Maintain incident logs and prepare incident reports.

Governance, Risk & Compliance Support

• Support the implementation of the Bank’s Information Security Policy, IT governance framework, and risk controls.
• Coordinate with Risk Management to: Identify IT and cyber risks
• Support risk assessments and KRIs
• Align controls with the Bank’s risk appetite

Support Compliance requirements related to data protection, access controls, and regulatory expectations.

Access Control & Security Monitoring

• Monitor and review user access rights to critical systems (including CBS).
• Support periodic access reviews and segregation of duties controls.
• Ensure timely removal or modification of access for staff movements and terminations.

Vulnerability Management & Security Testing

• Conduct or coordinate vulnerability assessments and security testing.
• Track remediation of identified vulnerabilities.
• Support implementation of security patches and system hardening.

Audit & Regulatory Support

• Act as a focal point for IT security matters during: Internal Audit
• External Audit
• Regulatory examinations

Support closure of IT security-related audit findings and regulatory observations.

Awareness & Capacity Building

• Support IT security awareness initiatives and training programs for staff.
• Promote a strong security culture and compliance with security policies.

Authority & Escalation

• Recommend security improvements and corrective actions.
• Escalate high-risk security incidents and systemic weaknesses to Dy-CIO and CRO.
• No authority to override business or system decisions without approval.

Education

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.

Professional Certifications (Preferred)

• CISSP, CISM, CISA, CEH, ISO 27001, or equivalent information security certifications.

Experience

• Minimum 3–5 years of experience in IT security, cybersecurity, or information risk management.
• Experience in banking, financial services, or regulated environments is a strong advantage.

Applicants who meet the above requirements are invited to submit their updated Curriculum Vitae (CV) or Resume to sr.recruitment-officer@ghazanfarbank.com .

Please ensure that you include the position title and vacancy announcement number in the email subject line ( IT Security Analyst GB/EAD/62 ).

Applications that do not follow this format will not be considered.

sr.recruitment-officer@ghazanfarbank.com