n We are looking for an experienced Head of Cybersecurity to lead and strengthen the cybersecurity function of a rapidly growing digital banking organization.2This role will be responsible for developing and executing the bank's cybersecurity strategy, protecting critical banking infrastructure and digital products, managing cyber risks, and ensuring compliance with applicable banking and regulatory requirements. The successful candidate will provide strategic cybersecurity leadership while maintaining strong hands‑on understanding across Security Operations, Cloud Security, Application Security, Identity & Access Management, Cyber Risk, Threat Intelligence, and Incident Response.
Key Responsibilities
- Cybersecurity Strategy & Leadership
Develop and execute the organization's enterprise cybersecurity strategy, roadmap, and security architecture.
Establish cybersecurity priorities aligned with digital banking products, business objectives, and technology transformation.
Lead and develop the cybersecurity organization, including defining team structure, capabilities, and succession planning.
Establish cybersecurity policies, standards, procedures, and governance frameworks.
Act as a trusted cybersecurity advisor to senior management and technology leadership. - Security Operations & Incident Response
Oversee Security Operations Center (SOC) and cybersecurity monitoring capabilities.
Establish and continuously improve security monitoring, detection, response, and threat hunting capabilities.
Lead the organization's response to major cybersecurity incidents and coordinate with relevant internal and external stakeholders.
Develop and conduct regular incident response, cyber crisis management, and business continuity exercises.
Ensure effective investigation and remediation of security incidents. - Application & Digital Banking Security
Establish security standards throughout the Software Development Lifecycle (SDLC).
Oversee Application Security, DevSecOps, API Security, Mobile Security, and penetration testing.
Partner closely with Engineering, Product, Architecture, and Infrastructure teams to embed security by design.
Ensure security controls are implemented across customer-facing digital banking applications and APIs.
Drive vulnerability management and remediation across critical applications and technology environments. - Cloud & Infrastructure Security
Define and maintain security standards for cloud, infrastructure, network, endpoint, and database environments.
Oversee cloud security posture management and security controls across public/private/hybrid cloud environments.
Ensure appropriate network segmentation, endpoint protection, encryption, logging, and monitoring.
Work closely with Infrastructure, Cloud, and Platform teams to strengthen the organization's security architecture. - Identity & Access Management
Lead cybersecurity governance for Identity & Access Management (IAM), Privileged Access Management (PAM), and authentication.
Strengthen access controls across employees, customers, applications, APIs, and third-party systems.
Ensure implementation of appropriate least-privilege and Zero Trust principles. - Cyber Risk & Governance
Establish and maintain the organization's cybersecurity risk management framework.
Conduct regular cybersecurity risk assessments and ensure appropriate mitigation plans.
Manage third-party and vendor cybersecurity risks.
Establish cybersecurity metrics, KPIs, KRIs, and executive-level reporting.
Work with Enterprise Risk, Internal Audit, Compliance, and Legal teams on cybersecurity-related matters. - Regulatory & Compliance
Ensure cybersecurity practices comply with applicable banking regulations, data protection requirements, and industry standards.
Support regulatory examinations, audits, and cybersecurity assessments.
Maintain appropriate documentation and evidence for regulatory and audit requirements.
Drive compliance with relevant frameworks such as ISO 27001, NIST Cybersecurity Framework, PCI DSS, and other applicable standards. - Threat Intelligence & Cyber Resilience
Establish cybersecurity threat intelligence capabilities relevant to the banking sector.
Monitor emerging cyber threats targeting financial institutions, digital banking platforms, payment systems, and customer data.
Translate threat intelligence into actionable security controls and risk mitigation strategies.
Strengthen overall cyber resilience and readiness against advanced cyber threats.
Key Requirements
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or related field.
- 10–15+ years of experience in cybersecurity / information security, with significant leadership experience.
- Proven experience leading cybersecurity functions within banking, fintech, financial services, payment, or other highly regulated industries.
- Minimum 5 years in a leadership position managing cybersecurity teams and/or enterprise security functions.
- Strong understanding of:
- Security Operations / SOC
- Incident Response
- Threat Intelligence
- Application Security
- Cloud Security
- Network & Infrastructure Security
- IAM / PAM
- Vulnerability Management
- DevSecOps
- Cyber Risk & Governance
- Security Architecture
- Experience managing cybersecurity transformation and building security capabilities from the ground up.
- Strong understanding of digital banking, mobile applications, APIs, cloud environments, microservices, and modern technology architecture.
- Experience working with senior executives, regulators, auditors, technology teams, and external security partners.
- Strong stakeholder management, communication, and leadership capabilities.
Preferred Certifications
- CISSP
- CISM
- CRIS
- CCCSP
- CEH
- GIAC / SANS certifications
- ISO 27001 Lead Implementer / Lead Auditor
- Other recognized cybersecurity certifications
Key Leadership Competencies
- Strategic Cybersecurity Leadership
- Cyber Risk Management
- Security Transformation
- Crisis & Incident Management
- Stakeholder Management
- Regulatory & Compliance Management
- Team Leadership & Talent Development
- Business & Technology Acumen
- Executive Communication
- Strategic Thinking and Decision Makingn