Manager IT Security

Taking its name from ZamZam Holy Water which gave life to the barren land of Makkah, springing the hills of Safa and Marwa; ZamZam Bank is working towards ensuring sustained economic growth.

Zamzam bank is aspiring and working relentlessly towards its vision of becoming the leading shari’ah compliant and all-inclusive bank in Africa by 2030. It is contributing to the economy by providing full-fledged interest free, affordable, effective banking and financial services to diverse individuals and organizations; and by promoting economic stability and financial access through its extensive branch networks.

The reputation of the bank is positioned on not only for its championship for pioneering financial inclusiveness, but also for its unwavering commitment to sheriah compliance products and services; strong networking; resources and organizational learning; innovative leadership and management practices; state of the art core banking systems and its international recognitions.

We are searching talented individuals to join us on our journey towards sustainable growth that enhance financial inclusion with a special focus on the part of society that is alienated from the financial system due to their religious beliefs or other factors. Is this you?

Place of work: Head Office

Your profile

Whether you want a career as a visionary professional banker in full-fledged interest free banking sector, or need to make sure that your earning is from halal source or second our cause towards ensuring sustained economic empowerment & stability through financial inclusiveness, we offer you these possibilities.

Key Job Duties and Responsibilities:                         

• Develop and implement information security program to maintain information security;
• Monitor the adherence to security policy, standards, guidelines and procedures to ensure that the Bank ’s information technology resources are appropriately protected from unauthorized destruction, alteration and access;
• Participate in the development and implementation of Information Technology Strategy, Governance framework, and Enterprise Architecture;
• Develop and Implement Cyber Security incident management framework and plan; and prepare reports for the concerned organs after proper analysis of Incidents if any;
•  Manage Penetration testing on IT systems, digital channels, and website with appropriate planning of the process and based on approval; and prepare reports for the concerned organs;
• Ensure that all applicable security controls are applied at each level to ensure defence in depth; and prepare reports for the concerned organs;
• Ensure that all Data sources, Information systems and Network traffic is monitored continuously and visibility is created on the security level
• Manages Incident response team by giving definite goals
• Automate security operation for security monitoring and orchestration.
• Assess the resilience of the Bank by conducting security analysis, isolate areas of weakness that need attention and follow up the mitigation.
• Review alerts, threat intelligence, and security data to Identify threats that have entered the network, and security gaps and vulnerabilities currently unknown;
• Prioritize actions during isolation, analysis, and containment of an incident; Also communicate any special requirements of high severity incidents to both internal and external stakeholders.
• Develop and Implement Vulnerability management framework to ensure vulnerabilities are identified, and patch on minimum period based on risk level; and prepare reports for the concerned organs;
• Lead Investigation process of fraud cases on IT systems and Digital channels as required; and prepare reports for the concerned organs;
• Deliver cyber security awareness training to all users on regular basis;
• Develop, implement, and monitor user role definition and user access management of All levels of IT users and enforce the same;
• Acts as a liaison with law enforcement agencies in their efforts to investigate any violation of information security and privacy laws;
• Compile and analyse incident response as well as the investigation of security breaches, and assist with disciplinary and legal matters associated with such breaches as necessary.
• Participate on Security related projects and provide security advice of other Information Technology projects and operations.
• Perform duties as assinged by its immediate and second Level supervisor”                                        

You are required to meet the following: