POSITION OBJECTIVE:
To define, implement, administer, maintain, and oversee the Bank’s Information Security Management System, understood as the set of principles, policies, standards, processes, application systems, technological infrastructure, users, and other information resources through which the Bank’s information and operations are governed, created, processed, and stored, with the purpose of reasonably ensuring the confidentiality, integrity, and availability of such information. This role also includes managing the cybersecurity of the Bank’s technology platforms, including those associated with electronic payment systems and investment trading platforms. Furthermore, the position is responsible for ensuring methodological and regulatory compliance of new technology solutions deployed into production, ensuring IT processes comply with COBIT, the SWIFT Customer Security Programme (CSP), and GDPR frameworks, and executing the investment projects required to maintain the adequacy and effectiveness of the Bank’s security platform.

GENERAL REQUIREMENT: To reside in Honduras.

Bachelor's or Engineering with a Master's degree or equivalent or a Bachelor's degree or Engineering with at least two years of additional experience to that required by the position.

EXPERIENCE REQUIRED BY THE JOB:

  • Information Security management and oversight.
  • Cybersecurity management and oversight.
  • Technology risk management.
  • Business Continuity and Disaster Recovery Planning administration.
  • IT service and process management.
  • IT governance, IT architecture, project management, and IT quality assurance methodologies and frameworks.      

GENERAL EXPERIENCE:

  • Minimum professional experience: 9 years.

FUNCTIONS:                  

  • Lead and ensure the execution of the necessary actions to detect, contain, investigate, and document any information security incident, cyberattack, or security-related issue that may threaten the confidentiality, integrity, or availability of the Bank’s information assets.
  • Design, implement, and manage the Bank’s information security architecture to prevent, detect, and contain internal and external threats and vulnerabilities that may affect information confidentiality, integrity, or availability. This includes administering and controlling access to information resources across application platforms, technology infrastructure, and the Bank’s electronic payment systems.
  • Ensure the effective security administration of the Bank’s electronic payment systems, including maintaining the accreditation of the security platform with external certification bodies, such as the SWIFT Customer Security Programme (CSP), while preserving the highest standards of confidentiality regarding the information managed by the Bank.
  • Ensure the definition, documentation, and continuous update of the methodological framework for information security and technology process management, maintaining alignment with the Bank’s IT strategy and COBIT governance framework, and ensuring compliance across technology processes and projects.
  • Promote and strengthen the Bank’s information security culture by ensuring the ongoing communication and dissemination of information security policies and standards to all members of the organization, while maintaining executive management commitment and support for the Bank’s information security strategy.
  • Ensure the periodic and independent review of the Bank’s software licensing schemes, information security controls through Ethical Hacking exercises, and compliance with personal data protection requirements.                         

REQUIRED KNOWLEDGE:

  • COBIT 2019 (validated through ISACA certifications such as CISA or CGIT, or equivalent experience).
  • ITIL.
  • Information Security (validated through certifications such as CISM or CISSP).
  • IT Quality Assurance or IT Architecture Frameworks (TOGAF preferred).
  • Ethical Hacking.
  • Business Continuity methodologies.     

REQUIRED SKILLS:

  • Written and oral communication skills in and English.   
  • Analytical skills.
  • Knowledge of technology best practices.
  • Technical expertise.
  • Negotiation skills.

Requiered Competencies:

  • Lead by example.
  • Communication and Emotional Intelligence.
  • Teamwork.
  • Service Quality.
  • Resilience.
  • Agile Problem Solving.
Candidates are required to meet the eligibility criteria, including holding the nationality of a CABEI member countries.

Through "phishing" techniques, unauthorized sources could potentially send emails with false and unauthorized content in the name of the CABEI.

CABEI would like to inform the public that the only official communication channels are through its website at www.bcie.org, its social media accounts, and the institutional email which originates exclusively from accounts and servers under the Bank's domain: @bcie.org.

At Impactpool we do our best to provide you the most accurate info, but closing dates may be wrong on our site. Please check on the recruiting organization's page for the exact info. Candidates are responsible for complying with deadlines and are encouraged to submit applications well ahead.
Before applying, please make sure that you have read the requirements for the position and that you qualify. Applications from non-qualifying applicants will most likely be discarded by the recruiting manager.