Banking / Financial Institutions

Cyprus

Societe Generale Bank Cyprus Ltd

Cybersecurity & Data Protection

IT Support, Systems and Networks

Main duties &amp; responsibilities:Responsible for overseeing the bank's IT and information security risk framework, ensuring that ICT and cyber risks are effectively identified, assessed, monitored, and mitigated in line with the bank's risk appetite and regulatory requirements.&nbsp;The role provides independent oversight and challenge of the first line of defence, supports governance through reporting to the Management Body of the Bank, and ensures compliance with European regulatory frameworks such as DORA and EBA Guidelines.&nbsp;Promotes a strong risk culture, coordinates technology risk assessments, oversees ICT risk metrics and incident reporting, and collaborates with business, IT and internal control functions to strengthen the bank's operational resilience and cybersecurity posture.&nbsp;Qualifications and experience required:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Academic qualifications in IT, Computer Science, Cybersecurity or other related field·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Relevant professional certifications such as CISM, CISSP, CRISC would be considered an advantage·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5- 10 years of experience in ICT risk management, information security within the financial services sector·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Knowledge of European banking regulations and supervisory expectations relating to ICT and cyber risk, including DORA, EBA Guidelines on ICT and Security Risk Management, EBA Guidelines on Internal Governance·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience in designing and implementing ICT and information security risk management frameworks, governance processes, risk appetite metrics and control assessment methodologies.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Proven ability to provide independent oversight and effective challenge to IT and business functions.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience in ICT risk assessments, cyber resilience, third-party and outsourcing risk, technology change risk, cloud risk, incident management oversight and operational resilience.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Excellent analytical, communication, and presentation skills, with the ability to communicate complex technology risks clearly to Senior management and the Management Body.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Demonstrated leadership capabilities, sound judgement, integrity and ability to foster a strong risk culture across the organisation.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fluency in the Greek &amp; English languages (verbal &amp; written)Remuneration:An attractive remuneration package is offered, flexibility in working hours, as well as a 4-day week in the Summer.

Head of ICT & Security Risk

Head of ICT & Security Risk

RELATED JOBS