BRAC Bank PLC is the first and only Bangladeshi bank to feature in Forbes’ World’s 500 Top Performing Banks. The bank is shaping the future of banking in Bangladesh through trust, innovation, and inclusion. As a values-based financial institution, the bank empowers customers and businesses with responsible financial solutions while upholding the highest standards of compliance, governance, and transparency. For professionals, the bank offers a platform where performance, integrity, and innovation thrive.

The bank is seeking a qualified and purpose-driven professional for the following position within its Risk Management Division in the following position:

Officer/Associate Manager, System Security and Risks, Information Security

Key Responsibilities:

• Contribute to the organization's information security strategy by developing and maintaining security policies, standards, procedures, awareness programs, risk assessments, and incident response capabilities.
• Design and review secure cybersecurity architectures and provide security recommendations for business and technology initiatives.
• Support secure digital transformation programs by evaluating, implementing, and managing next-generation security technologies and solutions.
• Administer and optimize enterprise security solutions, including XDR (Extended Detection and Response), DLP (Data Loss Prevention), Network Behavior Analytics (NBA/NDR), Sandboxing, Email Security Gateway, Mobile Device Management (MDM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA/2FA), Hard Disk Encryption, Vulnerability Management Platforms, SIEM, Threat Intelligence, and Endpoint Security solutions.
• Conduct security assessments, vulnerability assessments, penetration testing (VAPT), configuration reviews, and security compliance reviews to identify and mitigate risks.
• Perform continuous risk assessments, security reviews, and control effectiveness evaluations aligned with industry standards and regulatory requirements.
• Support compliance initiatives related to ISO 27001, NIST, PCI-DSS, OWASP, COBIT, and other applicable security frameworks.
• Manage cybersecurity vendors and third-party service providers, including solution evaluation, implementation oversight, performance monitoring, and risk assessments.
• Stay current with emerging cyber threats, vulnerabilities, attack techniques, and security technologies, and recommend appropriate remediation measures.
• Collaborate with IT, business, and project teams to ensure security requirements are integrated throughout the system and application lifecycle.
• Prepare security reports, dashboards, and management presentations, and perform other cybersecurity-related duties as assigned.

KEY QUALIFICATIONS:

• Minimum graduation in information security, Cyber Security, Computer Science, or a related field from a UGC-approved university with a satisfactory academic track record.
• Candidates are expected to hold one or more industry-recognized certifications such as: CEH / CPEH, CHFI, GCIA / GCIH, CPT / LPT, CISSO / CCISO, CISA, ISO 27001 Lead Implementer/Auditor.
• Minimum 2 years of direct Information Security experience, or Minimum 3 years of Information Systems/Infrastructure experience with strong exposure to network and infrastructure security.
• Experience in implementing and managing security programs and controls.
• Strong understanding of: Security methodologies and frameworks, technical security solutions, Security policies, standards, and compliance requirements, Security assessments and control effectiveness measurement, and
• Familiarity with: NIST, OWASP, PCI-DSS, ISO 27001, COBIT
• Ability to analyze data and drive innovation. Handle multiple projects simultaneously and deliver results. Strong problem-solving and decision-making capabilities.
• Strong written and verbal communication skills. Ability to prepare reports, presentations, and documentation for different audiences.
• Self-propelled, proficient in customer-centricity, team player, and capable of meeting deadlines.

BRAC Bank is a values-driven organization that prioritizes the protection of all its stakeholders, including coworkers and the community we work in, from harassment, abuse, neglect, exploitation, and discrimination. As an equal opportunity enabler, BRAC Bank encourages applications from any gender-diverse individuals and persons living with a disability. We consider personal persuasion to be a disqualification of candidature.

If you want to take up the challenge, please 'Apply Online.' 

Only short-listed candidates will be communicated for the next stage as per the recruitment process. BRAC Bank reserves the right to accept or reject any application without assigning any reason, whatsoever.

BRAC Bank does not charge any fee at any stage of the recruitment process.

Application Deadline: October 26, 2026