Department Head - Data Loss Prevention Policy (AVP)
National Bank of Pakistan
Published Date: • Karachi, Pakistan (On-Site)
Description
"The Nation's Bank", National Bank of Pakistan aims to support the financial well-being of the Nation along with enabling sustainable growth and inclusive development through its wide local and international network of branches. Being one of the leading and largest banks of Pakistan, National Bank of Pakistan is contributing significantly towards socioeconomic growth in the country with an objective to transform the institution into a future-fit, agile and sustainable Bank.
In line with our strategy, the Bank is looking for talented, dedicated, and experienced professional(s) for the following position in the area of Risk Management based in Karachi.
The individuals who fulfill the below basic-eligibility criteria may apply for the following position:
Position / Job Title:
Department Head - Data Loss Prevention Policy (AVP)
Reporting to:
Wing Head - IS Risk Management
Educational /Professional Qualification:
Minimum Graduation in Computer Science and / or Computer Engineering and / or Cybersecurity and / or Information Technology from a local or international university / college / institute recognized by the HEC of Pakistan
Candidates having Master’s or any other relevant professional certification such as CISM, CDPSE, Data Loss Prevention (DLP) technologies etc. will be preferred
Experience:
Minimum 06 years of experience in Information Security and / or Cybersecurity and / or Information Technology Risk and / or Data Protection and / or other relevant disciplines
Candidates having experience in managing enterprise-wide Data Loss Prevention (DLP) programs and technologies will be preferred
Other Skills / Expertise / Knowledge Required:
Strong knowledge of enterprise DLP solution and related programs such as data classification, data discovery, data protection, insider threat management, DLP incident investigation etc.
Strong knowledge of regulatory requirements and ISO 27001, PCI DSS and SWIFT CSP
Good interpersonal skills
Ability to work as a team player
Ability to work in a competitive environment and prioritize deadlines
Outline of Main Duties / Responsibilities:
To manage and administer the enterprise Data Loss Prevention (DLP) program and associate technologies to safeguard the Bank's sensitive information
To act as the primary liaison between Information Technology, Business Units, third party vendors and other stakeholders on DLP related matters
To lead and oversee DLP related risk assessments across business processes, applications, databases, cloud environments, endpoints and technology platforms
To identify, classify and monitor sensitive data flows and recommend appropriate controls to minimize the risk of data leakage
To develop, implement, maintain and periodically review DLP policies, standards, procedures and baselines in alignment with regulatory requirements and industry best practices
To ensure the effectiveness of DLP controls through continuous monitoring, policy tuning, control validation and periodic effectiveness assessments
To direct the monitoring and management of DLP dashboards, alerts, and incidents to identify potential data exfiltration and policy violations
To oversee the investigation, analysis, prioritization, escalation, reporting and closure of DLP incidents, ensuring timely resolution in accordance with established incident response procedures and service level agreements (SLAs)
To review and approve DLP incident reports, recommend corrective actions and ensure lessons learned are incorporated into process and control improvements
To define, monitor and report DLP Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to senior management
To provide guidance, training and awareness programs to educate employees on data protection requirements
To support internal and external audits, regulatory reviews and compliance assessments related to DLP governance, controls, and incident management, ensuring timely closure of observations
To perform any other assignment as assigned by the supervisor(s)
Place of Posting:
Karachi
Assessment Interview(s)
Only shortlisted candidates strictly meeting the above-mentioned basic eligibility criteria will be invited for panel interview(s).
Employment Type:
The employment will be on contractual basis for three years which may be renewed on discretion of the Management. Selected candidates will be offered compensation package and other benefits as per Bank’s Policy / rules.
Apply within 10 working days from the date of this job posting.
Applications received after due date will not be considered in any case. No TA / DA will be admissible for interview.
National Bank of Pakistan is an equal opportunity employer and welcomes applications from all qualified individuals, regardless of gender, religion, or disability.