Head of Cyber Security

About the role

The Executive Vice President of Cybersecurity leads the bank’s enterprise cybersecurity strategy, architecture, defence, assurance and resilience. The role defines security direction, standards and a maturity roadmap to protect customers, data, technology and digital services.

Key responsibilities

• Develop and drive a multi‑year cybersecurity strategy aligned with business objectives, risk appetite and regulatory expectations.
• Act as the senior design authority, embedding security‑by‑design into architecture, development, procurement and change initiatives.
• Lead cyber defence, monitoring, threat hunting, incident response and resilience activities, including major incident handling and crisis simulations.
• Oversee application, cloud, infrastructure and platform security, defining secure coding, DevSecOps and supply‑chain security requirements.
• Define and enforce cybersecurity risk and control frameworks, conduct assessments and manage third‑party security requirements.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, IT or Engineering; Master’s degree preferred.
• Minimum 12 years of relevant cybersecurity experience and at least 5 years in senior leadership of security functions.
• Proven track record developing enterprise cybersecurity strategies, roadmaps and capability transformation in regulated industries.

Required skills

• Cybersecurity strategy development and governance (ISO 27001, NIST).
• Security architecture and security‑by‑design.
• Application security, DevSecOps and secure coding practices.
• Cloud and infrastructure security, including container and identity protection.
• Vulnerability management, threat hunting and incident response.
• AI and emerging technology security considerations.
• Professional certifications such as CISSP, CISM, CCSP or GIAC.