IT Security Officer (ISO)

• Develop, implement, and monitor comprehensive IT security policies and procedures to safeguard the companys information assets.

• Conduct regular risk assessments and vulnerability assessments to identify and mitigate potential security threats.

• Collaborate with IT and business units to ensure the integration of security measures into the design and implementation of systems and applications, in alignment with DORA requirements.

• Act as an interface and liaise with the legal department to ensure that IT security practices comply with legal and regulatory requirements.

• Monitor and analyse security incidents, conduct investigations, and implement corrective actions.

• Stay informed about the latest cybersecurity threats, technologies, and best practices to maintain the companys security posture.

• Ensure strict compliance with the Digital Operational Resilience Act (DORA) and other relevant regulatory frameworks governing the banking industry in Malta.

• Liaise with regulatory bodies, industry forums, and other stakeholders to stay abreast of changes in regulations and compliance requirements.

• Provide guidance and support to internal teams on security-related matters and foster a culture of security awareness within the organization.

• Manage and oversee security awareness training programs for the companys employees.

• Prepare and submit reports to regulatory bodies as required.

• 5 years of proven experience in IT security roles within the banking or financial services industry.

• Experience in conducting risk assessments, vulnerability assessments, and security audits.

• In-depth knowledge of information security principles, practices, and technologies.

• Familiarity with and understanding of regulatory frameworks applicable to the banking sector in Malta, especially DORA.

• Understanding of security architecture, security protocols, and encryption techniques.

• Strong analytical and problem-solving skills, with the ability to make sound decisions under pressure.

• Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams.

• Proactive approach to identifying and addressing security issues and vulnerabilities.

• Ability to stay current with industry trends, emerging threats, and new technologies.

• Bachelors degree in Information Security, Computer Science, or a related field.

• Relevant certifications (CISSP, CISM, CRISC, etc.) are highly desirable.

• Competitive salary.

• Dental and Health insurance.

• Free parking.

• Performance bonus.

• Annual Performance Appraisal.

Iris Thaumas