Position: Chief Information Security Officer (CISO) ID: PR_0041
The role provides strategic leadership and oversight of the Bank's information security and cybersecurity function. The role is responsible for developing and implementing information security policies, managing cyber and technology risks, protecting the confidentiality, integrity and availability of information assets, and ensuring compliance with applicable regulatory requirements and industry standards.
Responsibilities
- Develop, implement and periodically review the Bank's information security strategy, policies, standards and procedures in line with business objectives and the evolving threat landscape.
- Lead the identification, assessment, monitoring and mitigation of information security and cybersecurity risks across the Bank.
- Oversee security governance, risk management and compliance activities, ensuring alignment with applicable Bank of Ghana directives, data protection requirements and relevant industry standards.
- Establish and oversee controls to protect the Bank's networks, systems, applications, databases, endpoints and other information assets from unauthorised access, misuse and cyber threats.
- Lead the monitoring, detection, investigation, reporting and resolution of information security incidents, including coordination of incident response and recovery activities.
- Oversee vulnerability assessments, penetration testing, security reviews and remediation of identified weaknesses.
- Develop and maintain the Bank's information security awareness and training programmes to promote a strong security-conscious culture among employees and relevant third parties.
- Provide oversight of identity and access management, privileged access, authentication controls and periodic access reviews.
- Assess security risks associated with technology projects, system implementations, digital banking services, vendors and other third-party relationships.
- Develop, test and maintain cybersecurity incident response, business continuity and disaster recovery arrangements in collaboration with relevant stakeholders.
- Monitor emerging cyber threats, vulnerabilities and security trends and recommend appropriate preventive and corrective measures.
- Prepare regular information security risk reports, dashboards and recommendations for Executive Management and the Board or relevant Board Committee.
- Lead engagement with internal and external auditors, regulators and other relevant stakeholders on information security matters, and track agreed actions to closure.
- Manage the information security function, including team development, performance, resource planning and continuous improvement.
- Promote security-by-design principles and ensure information security considerations are embedded in business processes and technology initiatives.
- Review and advise on security requirements for contracts, service providers and technology solutions before implementation or renewal.
- Ensure appropriate records, policies, risk registers, incident logs and compliance evidence are maintained and up to date.
- Advise senior management on the Bank's cyber risk exposure, security posture and priority investments required to strengthen resilience.
Requirements
- A minimum of a bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems or a related field. A master's degree in relevant field will be an advantage.
- At least 10 (ten) years of relevant experience in information security, cybersecurity, IT risk or technology governance, including significant experience in a leadership or management role. Experience in the banking or financial services sector is strongly preferred.
- Relevant professional certifications such as CISSP, CISM, CISA, CRISC, CEH or equivalent cybersecurity and information security certifications will be an advantage.
Job Details
- Location: Accra, Accra, Ghana
- Date Opened: Oct 23, 2026
- Due Date: Oct 29, 2026
- Status: Open