iFAST Global Bank Limited

Security Engineer

• - Monitor security events, anomalies, and alerts across the organization, reporting findings to relevant teams.
• - Act as the primary point of contact and participate in information security incidents and breaches, coordinating responses following established incident management protocols.
• - Support regulatory and stakeholder incident and breach notifications, including material incident assessments.
• - Assist in identifying, assessing, and mitigating security vulnerabilities, threats, and weaknesses.
• - Maintain security records, dashboards, and reports to provide insight into the organization’s security posture.
• - Implement, manage, and monitor technical and procedural security controls to protect the bank’s data, systems, and networks.
• - Assist in conducting vulnerability assessments, penetration testing, and risk evaluations.
• - Provide security inputs, engage in technical reviews and remediation actions in new products, change initiatives, and technology projects, including cloud and third-party solutions.
• - Support compliance with relevant regulations, standards and frameworks (e.g., ISO27001, PCI-DSS, NIST, SWIFT CSP, FCA/PRA expectations).
• - Stay informed on emerging security threats, breaches, and industry best practices, providing recommendations for remediation and enhancements.
• - Ensure proper controls are in place to maintain the confidentiality, integrity, and availability of information.
• - Assist in risk assessments to identify, evaluate, and prioritize controls to mitigate information security risks. Support the documentation and tracking of technical risk treatment plans and remediation actions.
• - Propose and document technical and procedural controls to secure internal, external, and public network information flows.
• - Support both internal and external audits, providing detailed security input for regulatory, scheme, and payment system reviews.
• - Evaluate the adequacy and effectiveness of security policies, processes, and controls, advising on risk mitigation measures.
• - Provide expert guidance on compliance with information security regulations, including event resolution and breach notifications.
• - Liaise with internal teams, peers, and third parties to ensure security measures are aligned and effective.
• - Contribute to internal committees on information security risks and emerging issues.

Information Security Manager