IT Security Head (Banking & Financial Services)

Key ResponsibilitiesSecurity Operations Leadership

• Lead the end-to-end Security Operations function, including monitoring, threat detection, threat intelligence, and response.
• Manage and optimise the SOC (internal or outsourced), ensuring 24/7 coverage and effective escalation workflows.
• Oversee tuning and continuous improvement of SIEM, IDS/IPS, EDR/XDR, WAF, and other detection technologies.

Incident Response & Threat Management

• Serve as incident commander for security events and coordinate cross-functional response.
• Conduct root cause analysis, containment, eradication, and recovery efforts.
• Build and maintain playbooks for high-severity incidents (e.g., account compromise, malware outbreak, DDoS, data exposure).

Vulnerability & Patch Management

• Own the vulnerability management lifecycle, from scanning and prioritisation to remediation oversight.
• Partner with infrastructure and engineering teams to ensure timely patching of systems and applications.
• Lead red/purple team exercises and manage penetration testing engagements.

Technical Security Architecture & Hardening

• Recommend and enforce secure configurations for servers, endpoints, cloud workloads, and networks.
• Collaborate with engineering teams to embed security-by-design into new systems and releases.
• Review and approve high-risk technical changes and architecture modifications.

Cloud & Infrastructure Security

• Oversee security controls in cloud environments (e.g., AWS, Azure, GCP), including IAM, logging, network segmentation, encryption, and key management.
• Ensure strong endpoint, perimeter, and application-layer defences across hybrid/cloud setups.

Tools, Automation & Continuous Improvement

• Develop and implement automation to improve detection, response, and reporting workflows.
• Evaluate new security tools and technologies for operational fit and ROI.
• Build dashboards for operational metrics, threat trends, and remediation performance.

Team Leadership & Collaboration

• Lead and develop a technical security operations team; mentor analysts and engineers.
• Work closely with the CISO to align operational priorities with the broader security strategy.
• Collaborate with Engineering, Infrastructure, Product, and Compliance teams to ensure secure service delivery.