مطلوب رئيس قسم مخاطر أمن المعلومات

الوصف الوظيفي:
Key Responsibilities:

Manage and strengthen the Technology and Information Security Risk Management Framework across the Bank and its subsidiaries, ensuring effective risk identification, assessment, monitoring, remediation, and alignment with the approved Risk Appetite.
Assess emerging cybersecurity, technology, and information security threats and vulnerabilities, providing risk-based recommendations and reporting to senior management and relevant committees.
Govern and continuously improve information security policies, standards, procedures, and the Information Security Management System (ISMS), ensuring compliance with regulatory requirements and industry standards.
Oversee technology and information security risk assessments for applications, infrastructure, networks, cloud services, digital initiatives, and new technologies, ensuring security-by-design principles are applied before production deployment.
Manage third-party and service provider security risks, ensuring compliance with established controls, security requirements, and contractual obligations.
Oversee identity and access governance, including privileged access management, the Least Privilege principle, and periodic access reviews.
Direct vulnerability management, penetration testing, and source code security reviews, ensuring risks are prioritized, remediated, and escalated appropriately.
Monitor security risks and the effectiveness of controls across IT infrastructure, networks, applications, encryption, cloud environments, and physical technology assets.
Strengthen cybersecurity risk management and digital resilience by overseeing critical systems' resilience, IT disaster recovery planning, and annual testing against Board-approved RTO and RPO objectives.
Support cybersecurity incident risk management by assessing business impact, recommending appropriate actions, and ensuring timely escalation to relevant stakeholders.
Monitor data privacy and protection risks, ensuring applicable requirements are integrated into risk management processes and security-by-design practices.
Develop and monitor Information Security Risk Indicators and Metrics (KRIs/KPIs), providing regular reports on risk exposure, emerging trends, control effectiveness, and remediation progress.
Promote a risk-aware security culture through targeted information security awareness and training programs for employees and contractors.
Oversee compliance with applicable cybersecurity and information security requirements, including PCI DSS, SWIFT CSP, DIFC security requirements, and other relevant regulatory and industry standards.
Key Competencies:

Information Security Governance and Regulatory Compliance.
Cybersecurity Risk Management and Technical Expertise.
Threat Detection, Incident Management, and Problem-Solving.
Strategic Leadership and Decision-Making.
Analytical Thinking and Risk Assessment.
Communication and Stakeholder Management.
Business Continuity and Disaster Recovery.
Continuous Improvement and Security Awareness.
متطلبات الوظيفة:
Job Requirements

Bachelor’s degree in IT, Computer Engineering, Cybersecurity, Information Security, or a related field, with 10+ years of relevant experience in banking, IT, cybersecurity, or technology risk management.
Strong knowledge of banking operations, IT governance, risk management, cybersecurity, and technology controls.
Good understanding of IT infrastructure, applications, networks, cloud technologies, access management, encryption, and security architecture.
Knowledge of recognized frameworks and standards, including ISO/IEC 27001, NIST, COBIT, and applicable regulatory requirements.
Experience in technology risk assessments, risk appetite management, KRIs/KPIs, third-party risk management, and senior management reporting.
Strong strategic, analytical, organizational, communication, presentation, negotiation, and stakeholder management skills.
Fluency in written and spoken Arabic and English.
Preferred Certifications:

Professional certifications such as CRISC, CISM, CISSP, or ISO/IEC 27001 Lead Implementer/Lead Auditor.
تفاصيل الوظيفة:
المسمى الوظيفي: Head of Information Security Risk Department
آخر موعد للتقديم: 09.11.2026.
المكان: رام الله والبيرة
طبيعة العمل: مكتبي أو ميداني (مقر العمل)
نوع الوظيفة: دوام كامل
المستوى المهني: إداري/ إشرافي
الدرجة العلمية: البكالوريوس
الخبرة: 10 سنوات
التصنيف: مجالات متنوعة
آلية التقديم:
How to Apply:
Deadline: Monday, November 9, 2026
Apply at: https://bankofpalestine.com/career
Reference: Head of Information Security Risk.

Bank of Palestine is an equal-opportunity employer. We value diversity and are committed to fostering an inclusive workplace. We appreciate all applications; however, only shortlisted candidates will be contacted for an interview.