Senior Officer to Principal Officer - Information Security (Information Technology Division)

Bangladesh Bank

Category:Bank Jobs

More Jobs of this Company

Job Summary

Sex type: Both

Job Nature:Full Time

Age:At least 26 years

Experience:At least 4 yearsThe applicants should have experience in the following business area(s): Banks

Educational Requirements: Master of Science (MSc)/Bachelor of Science (BSc) in Computer Science & Engineering or Information and Communication Technology or a related discipline.

Job Location:Dhaka

Salary Range: --

Published: 02 Jul 2026

Deadline: 17 Jul 2026

Vacancy: 03

Job Description

Support the implementation and monitoring of the Bank’s Information Security Policy, IT Governance framework, and regulatory requirements, including Bangladesh Bank ICT Security Guidelines, ISO/IEC 27001, PCI-DSS, and SWIFT CSP.
Participate in SOC operations, including security monitoring, SIEM log analysis, threat detection, incident handling, investigation, escalation, and response activities.
Operate and monitor security solutions such as SIEM, PAM, SOAR, EDR, DLP, FIM, and Vulnerability Management tools to ensure effective security controls and compliance.
Conduct vulnerability assessments, penetration testing, security reviews, and risk assessments across applications, databases, networks, servers, storage systems, and DC-DR environments.
Support audit and compliance activities, cyber threat monitoring, digital forensics, security awareness programs, and other cybersecurity-related tasks assigned by management.

Job Requirements

Age At least 26 years Strong understanding of banking regulations, compliance requirements, and relevant functional/technical areas.Proficiency in MS Office applications (Word, Excel, PowerPoint); candidates with relevant banking or financial sector experience will be preferred.Strong knowledge of Information Security, Cyber Security frameworks, IT Governance, and regulatory compliance requirements applicable to the banking sector.Hands-on understanding of SOC operations, incident response, SIEM, PAM, SOAR, and VA/PT tools, including security monitoring, threat detection, automation, and vulnerability management.Knowledge of secure software development (SSDLC, OWASP Top 10), database security, encryption, access controls, web application security, and cloud security principles.Understanding of network security, Windows/Linux operating systems, databases, programming, server hardening, patch management, DC-DR operations, and business continuity planning and strong analytical, documentation, and communication skills with the ability to work in a 24×7 security environment.Cybersecurity certifications (CEH, CompTIA CySA+, OSCP, etc.) and experience with TryHackMe, Hack The Box, or national cyber drills will be considered an advantage.

Job Source

https://bdjobs.com/h/details/1504730