Information Security Officer

Bank of Jordan, a reputable financial institution in Jordan, is seeking a highly skilled and experienced Information Security Officer to join our team. As the Information Security Officer, you will play a critical role in ensuring the confidentiality, integrity, and availability of our systems and data, while managing and enhancing the bank's information security program.

At Bank of Jordan, safeguarding our customers' sensitive information and protecting against cyber threats is of utmost importance. As the Information Security Officer, your responsibilities will include developing and implementing information security policies and procedures, conducting risk assessments, managing security incidents, and providing guidance and training to employees.

Responsibilities

• Develop and implement the bank's information security policies, standards, and guidelines.
• Conduct regular risk assessments to identify and evaluate potential threats and vulnerabilities.
• Monitor the bank's information systems, networks, and applications for security incidents.
• Manage and respond to security incidents, including conducting investigations, identifying root causes, and implementing corrective actions.
• Ensure compliance with relevant laws, regulations, and industry standards related to information security.
• Provide guidance and training to employees on information security best practices and awareness.
• Collaborate with cross-functional teams to implement security controls and technologies.
• Stay updated with the latest information security trends, threats, and technologies.
• Manage relationships with external vendors, auditors, and regulatory bodies related to information security.

Requirements

• Bachelor's degree in computer science, information technology, or a related field.
• 5+ years of experience in information security or a related field, preferably in the banking or financial services industry.
• Strong knowledge of information security principles, technologies, and best practices.
• Experience in developing and implementing information security policies and procedures.
• Understanding of risk assessment methodologies and regulatory compliance requirements (e.g., PCI DSS, GDPR, etc.).
• Excellent analytical and problem-solving skills.
• Ability to effectively communicate complex technical concepts to non-technical stakeholders.
• Professional certifications in information security, such as CISSP, CISM, or CRISC, are highly desirable.
• Strong leadership and interpersonal skills.
• Ability to work independently and collaboratively in a team environment.
• Proficiency in written and spoken English.