Operating in the UAE for over 50 years, CBD manages the financial requirements of some of the largest corporates and businesses operating in the country, driving the UAE economy. Over the years, CBD has transformed into a progressive and modern banking institution winning multiple awards for its digital initiatives, credit cards, bank accounts, mobile app features and services.

CBD has been recognized as the number one bank in the UAE on the Forbes list of The World\xe2\x80\x99s Best Banks 2022.

As we continue to build upon our successes, we are looking for ambitious individuals who are passionate about the banking and finance industry and the markets in which CBD operates. Just as important to us is your ability to demonstrate a talent for dealing with people - your colleagues and our customers - and delivering service that really goes the extra mile.

JOB PURPOSE

Responsible to ensure that the Bank has a sound controls framework for identity management, user privileges review and application security monitoring of all critical banking applications, through the implementation and maintenance of appropriate policies, procedures, standards and guidelines.

Responsible for managing the IAM (Identity and Access Management) initiatives.

Assist Head of Tech Risk managing the IAM team responsible for user management and access privileges review of banking applications.

Develop appropriate policies, standards, processes, procedures, checklists, and guidelines related to IAM of banking applications.

Create and Manage the Email DLP policies.

Review Data Loss Prevention (DLP) incidents on regular basis and escalate the non \xe2\x80\x93 compliant item to Head of Tech Risk.

Minimize the DLP incidents by whitelisting the incidents by scrutinizing the incidents with Risk & Business perspective.

Create and distribute monthly phishing simulations to maintain Phishing susceptibility rate below 5% and analysing response data for further enhancement and action against repeated offenders.

Create Information Security Awareness program, artwork and infographics and distribute across CBD to spread the awareness related to Information Security.

Create and distribute the monthly Patch Compliance reports to IT.

Timely mitigation of risks identified by Internal Audit, by tracking, following-up and addressing all observations.

Implement data analysis procedures using analytical applications to dig out exceptions and violations in existing banking applications.

Implement and review security matrix, with the definition of all user roles and its privileges, for all critical banking applications and ensuring that access is provided based on job descriptions of the staff at different levels.

Periodical review of user rights in the banking applications to ensure that they are as per the job requirements.

Review any changes in controls arising from the introduction of new products/processes and ensure these are being implemented or adhered to by liaising with concerned business units.

Provide support and guidance to staff (IAM) and also provide training for concerned staff at Branches/HO Departments.

Group:
Risk Management

EXPERIENCE & SKILLS

\xef\xbb\xbf

5-7 years (minimum) in a banking environment

Very good working knowledge of Bank\xe2\x80\x99s core applications and other transaction processing systems

Minimum of 3 years as team leader or manager

Good command of English. Arabic language would be an added advantage.

Strong investigative and interpretive skills

Analytical skills

Knowledge of banking operations

Knowledge of core CBD applications (e.g. Phoenix, GFS, etc.)

Coaching Skills

CBD