iFAST Global Bank Limited

Security Engineer

• - Monitor security events, anomalies, and alerts across the organization, reporting findings to relevant teams.
• - Act as the primary point of contact and participate in information security incidents and breaches, coordinating responses following established incident management protocols.
• - Support regulatory and stakeholder incident and breach notifications, including material incident assessments.
• - Assist in identifying, assessing, and mitigating security vulnerabilities, threats, and weaknesses.
• - Maintain security records, dashboards, and reports to provide insight into the organization’s security posture.
• - Implement, manage, and monitor technical and procedural security controls to protect the bank’s data, systems, and networks.
• - Assist in conducting vulnerability assessments, penetration testing, and risk evaluations.
• - Provide security inputs, engage in technical reviews and remediation actions in new products, change initiatives, and technology projects, including cloud and third-party solutions.
• - Support compliance with relevant regulations, standards and frameworks (e.g., ISO27001, PCI-DSS, NIST, SWIFT CSP, FCA/PRA expectations).
• - Stay informed on emerging security threats, breaches, and industry best practices, providing recommendations for remediation and enhancements.
• - Ensure proper controls are in place to maintain the confidentiality, integrity, and availability of information.
• - Assist in risk assessments to identify, evaluate, and prioritize controls to mitigate information security risks. Support the documentation and tracking of technical risk treatment plans and remediation actions.
• - Propose and document technical and procedural controls to secure internal, external, and public network information flows.
• - Support both internal and external audits, providing detailed security input for regulatory, scheme, and payment system reviews.
• - Evaluate the adequacy and effectiveness of security policies, processes, and controls, advising on risk mitigation measures.
• - Provide expert guidance on compliance with information security regulations, including event resolution and breach notifications.
• - Liaise with internal teams, peers, and third parties to ensure security measures are aligned and effective.
• - Contribute to internal committees on information security risks and emerging issues.

Information Security Manager

Risk

• Managing the Board Risk Committee and Executive Risk Committee meetings, including meeting scheduling, collation and distribution of material, presenting at the meeting, maintaining the action item log and taking minutes
• Preparing meeting packs for the Group Board Risk Committee and Group Management Risk Committee
• Assist in the maintenance of the Risk Management Framework and its components
• Monitoring and reporting of key risk indicators
• Organise and facilitate Risk Control Self-Assessment (RCSA) workshops for mapping of key business risks and controls
• Responsible for overseeing Risk Control Monitoring Plan (RCMP) testing and reporting of progress
• Responsible for operational risk events identification, root cause analysis, tracking/oversight of closure and reporting
• Monitoring and reporting on open risk/control issues raised from audits/ reviews to closure by validating supporting evidence
• Oversee all operational risk components including risks originating from people, process, systems, external events; particular focus on technology risks, operational resilience and information security
• Assist the CRO with any projects or departmental involvements
• Oversee the management of credit risk, liquidity risk, market risk and capital requirements during other team member’s absences

Information Security Manager

Risk Management Manager / Assistant Manager