Position Goal

National Banking Corporation has an ambitious growth strategy to become a full-service commercial bank. It is driving transformational change across its business with a strong focus on innovation and diversification. The bank aims to deliver a leading-edge customer service experience to more individual and smaller/medium business customers that will positively impact the financial services sector and help drive Papua New Guinea’s economic prosperity.

Key Result Areas

National Banking Corporation has a 5-year strategic plan that involves significant whole-of-business transformation.

Accountability to:

• Daily monitoring of logs and other feeds and outputs from technology deployed in the NBC environment to ensure intrusion detection and maintenance of NBC’s cybersecurity posture. Any intruder activity detected or changes in NBC’s cybersecurity posture must be promptly reported to the Information Security Manager and the Senior Manager Information Security &GRC.
• Support implementation of required fixes to manage intrusion and other threats and maintain NBCs agreed level of cyber security risk.
• Support incident response and the investigation of cyber security breaches.
• Interface with Risk, Internal Audit, external Audit, Regulator and/or provide timely support during audits.
• Support the implementation of new cybersecurity solutions through work with enterprise architects, infrastructure, network, and applications teams.
• Implement upgrades and patching of deployed cybersecurity solutions
• Monitor network traffic and systems for security breaches and anomalies.
• Implement and maintain security controls, such as firewalls, intrusion detection systems, and encryption.
• Respond to security incidents and conduct incident response investigations.
• Stay up to date on the latest security threats and trends.
• Collaborate with other IT teams to ensure security is integrated into all IT processes.
• Administer all security tools and liaise with internal teams on remediation activities.
• Provide security awareness training to employees.
• Perform internal vulnerability assessments and assisting in patch management.
• Perform BAU tasks for Mail and WAF filter

Qualifications and experience

• Degree in Information Technology or Cybersecurity
• CompTIA Security+, ISC2- CC or CySA+ Qualification (desirable)
• At least 3 years’ experience within a large and diverse ICT organization or Banking Industry.
• Administering Checkpoint EDR
• Banking Information Security or cybersecurity
• Managing MFA and IAM/PAM
• Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
• Proficiency in security tools and technologies (e.g., SIEM, IDS, IPS, firewalls).

Skills and abilities

• Log analytics
• Incidence Response
• Access Reviews
• Excellent analytical and problem-solving skills.
• Strong attention to detail and ability to prioritize tasks.
• Excellent written and verbal communication skills.