InfoSec Assurance Manager – Data

About the role

The InfoSec Assurance Manager – Data will lead the bank’s data security assurance program, ensuring that sensitive information is protected throughout its lifecycle. You will work closely with IT, business units, and third‑party partners to maintain compliance with regulatory and internal policies.

Key responsibilities

• Lead assurance reviews for databases, applications, and data flows, validating protection at rest, in transit, and in use.
• Oversee implementation and enforcement of encryption, masking, and anonymization controls and verify their effectiveness.
• Manage operation and validation of Data Loss Prevention (DLP) systems, ensuring policy compliance and incident follow‑up.
• Conduct risk assessments for data pipelines and repositories, documenting vulnerabilities and recommending mitigations.
• Review and validate access control mechanisms for databases and sensitive repositories.
• Coordinate backup and recovery assurance testing to preserve data confidentiality and integrity.
• Ensure secure data retention and disposal practices across IT and business teams.
• Monitor data‑related incidents, investigate breaches, and drive root‑cause remediation.
• Prepare dashboards and assurance reports on the bank’s data security posture for senior leadership.
• Lead third‑party assurance reviews of data platforms and support secure adoption of new data and AI solutions.

Required profile

• Bachelor’s degree in Engineering, Information Technology, or Computer Science.
• 8‑10 years of experience in information security, preferably within the banking sector.
• Strong knowledge of data security frameworks such as GDPR, PCI DSS, and local CBE guidelines.
• Proven experience with database assurance for SQL, Oracle, and MongoDB environments.

Required skills

• SQL
• Oracle
• MongoDB
• Data Loss Prevention (DLP) tools
• Encryption, data masking, and anonymization techniques
• Backup and recovery processes
• Access control mechanisms
• GDPR compliance
• PCI DSS compliance
• CBE guidelines