privacy compliance manager

Ernest Talent

<p>The Data Privacy Officer (DPO) is responsible for overseeing Sadad's data protection strategy and its implementation to ensure compliance with applicable data privacy laws and regulations, including the Qatar Data Privacy Law and Qatar Central Bank (QCB) guidelines. This role involves advising business units on data privacy matters, assessing compliance, identifying and mitigating data privacy risks, and serving as the primary liaison with regulatory authorities.</p><p><b>Key Responsibilities:</b></p><p>1. Ensuring Compliance with Data Privacy and Protection Regulations</p><p>2. Conducting Data Protection Impact Assessments to identify and mitigate risks.</p><p>3. Developing and Implementing Privacy Policies and Procedure</p><p>a) Identification of all data processed within the organization.</p><p>b) Data classification.</p><p>c) Data mapping exercises.</p><p>d) Data process ownership.</p><p>e) Data masking standards.</p><p>f) Data retention guidelines, data backup up and disaster recovery.</p><p>g) Data security policy and procedure.</p><p>h) Third Party data protection controls.</p><p>i) Secure data transfer procedures.</p><p>4. Training Employees on Data Privacy</p><p>5. Responding to Data Breaches - must coordinate the response, mitigate damage, notify authorities if required, and implement measures to prevent future breaches.</p><p>6. Monitoring Data Processing Activities - ensuring that data collection, storage, and sharing practices comply with privacy laws.</p><p>7. Reporting on the data privacy activities and compliance status to the CEO</p><p>8. Acting as a Liaison with Regulatory Authorities</p><p>9. Maintaining Records &ndash; to maintain records of all data processing activities carried out by the organization</p><p><b>Qualifications:</b></p><ul><li>Bachelor&rsquo;s degree in Information Technology, Cybersecurity, Computer Science, or a related field.</li><li>Preference for candidates with specialized certifications such as Certified Information Privacy Professional (CIPP) or Certified Information Privacy Technologist (CIPT).</li><li>At least 5 years of experience in privacy management, data protection, or a related data governance role. Experience in the banking or digital payment industry is preferred.</li></ul><p>Job Type: Full-time</p>

Data Privacy Officer (DPO)

Community First Medical Center

<div>Description:
<p>
Plans for, organizes, implements, and directs the day -to-day activities of the Health Information Management Department including but not limited to record processing, scanning, deficiency tracking and completion of hospital and clinic records, release of information, death certificate completion, coding and clinical documentation improvement activities. Serves as the facility&rsquo;s Privacy/Compliance Officer.</p><p></p><p><b><br>
ESSENTIAL DUTIES AND RESPONSIBILITIES</b></p><p>
1. Ensures appropriate HIM staffing, evaluates staff performance, interviews and selects personnel for open HIM positions, counsels and terminates employees as necessary.</p><p>
2. Reviews and revises all HIM department policies, including privacy and compliance policies. Implements new ones as required. Participates in policy review for the organization in areas that impact health information management, privacy, compliance.</p><p>
3. Manages HIM staff with an emphasis on continuous performance improvement, customer satisfaction, quality of work produced, productivity and efficiency.</p><p>
4. Has general oversight for the coding functions and staff which fall under the Coding Manager&rsquo;s responsibilities.</p><p>
5. Establishes departmental goals and objectives and sets appropriate timelines to accomplish goals. Monitors effectiveness of actions taken.</p><p>
6. Participates in education and quality assurance initiatives for the HIM Department and other areas that impact HIM activities.</p><p>
7. Regularly reviews the requirements of regulatory agencies (Joint Commission, CMS, IDPH) and</p><p>
compares requirements with current practice to identify areas needing improvement. Takes steps to</p><p>
improve compliance to these requirements in all areas relating to health information management,</p><p>
 privacy, compliance.</p><p>
8. Serves as an informational resource to the organization in matters related to HIM, privacy, compliance, coding, billing, documentation, electronic medical record integrity, record retention, actively participates in the revenue cycle management process related to HIM, and hospital committees when required,</p><p>
9. Communicates with physicians and clinicians concerning documentation, and record completion.</p><p>
10. Makes oneself available to hospital sr. leadership and department managers to problem solve issues, offer solutions for situations/issues relating to HIM, privacy, compliance in a collaborative manner.</p><p>
11. Makes oneself available to hospital sr. leadership and department managers to problem solve issues, offer solutions for situations/issues relating to HIM, privacy, compliance in a collaborative manner.</p><p>
12. Serves as the contact for outsourced release of information vendor, outsourced ED coding/ pro-fee billing vendor, and others.</p><p>
13. Fills in and/or assists staff with job function responsibilities when needed.</p>
Requirements:
<p><b>
Education and/or Experience</b></p><ul><li>Bachelor&rsquo;s degree in Health Information Management with RHIA certification and a minimum of 3 years HIM, coding supervisory or managerial responsibilities in an acute care hospital, preferred.</li><li>Associates degree in health information management with RHIT certification and a minimum of 5 years HIM, coding supervisory/managerial responsibilities.</li><li>ICD-10 and CPT coding skills, up-to-date knowledge of DRG/APR-DRG and PPS.</li><li>Familiar with clinical documentation specialist functions and principles to successfully manage the program.</li><li>Knowledge of health information management principles, processes and best practices, HIPAA regulations, Joint Commission standards, CMS regulations other regulatory standards and laws associated with acute care hospitals.</li><li>Experience with electronic health records, health information systems, and healthcare applications (Epic preferred).</li><li>Knowledge of privacy and security regulations, confidentiality, laws, access, and release of information.</li><li>Knowledge of health information management, best practices, processes and procedures.</li></ul><p>
. Must have strong interpersonal skills, good management skills, and excellent verbal and written communication.</p><ul><li>Must demonstrate professionalism, tact and diplomacy when working with the medical staff, hospital leadership and staff, patients and outside organizations/vendors.</li></ul><p><b>
Computer Skills</b></p><p>
Hands on experience with Microsoft office products,</p><p>
Experience with an electronic medical record system and scanning software required, Epic experience preferred.</p><p><b>
Certificates, Licenses, Registrations:</b> Certification by AHIMA &ndash; RHIA or RHIT required, must maintain active membership in AHIMA and certification during duration of employment.</p><p></p><p><b><br>
Community First Medical Center offers benefits to all its full-time and part-time employees</b>:</p><p>
United Healthcare Medical PPO/HMO Plans | MetLife Dental |MetLife Vision| 6 Paid Holidays | Paid Time Off | Sick Bank l Company Paid Short-term Disability Company Paid Life Insurance | 401(k) | Voluntary Benefits: Hospital Indemnity &amp; Critical Illness |</p><p><i>
Community First Medical Center is an affirmative action/equal opportunity employer who is committed to cultivating diversity, equity and inclusion within all aspects of our organizations. We stand against and prohibit discrimination in hiring or employment on the basis of age, sex, race, color, religion, national origin, gender identity, veteran status, disability, sexual orientation or any other protected status.</i></p></div>

Manager, HIM/Privacy/Compliance

hims & hers

<div><p>Hims &amp; Hers is the leading health and wellness platform, on a mission to help the world feel great through the power of better health. We are redefining healthcare by putting the customer first and delivering access to care that is affordable, accessible, and personal, from diagnosis to treatment to delivery. No two people are the same, so we provide access to personalized care designed for results. By normalizing health &amp; wellness challenges and innovating on their solutions, we&rsquo;re making better health outcomes easier to achieve.</p><p></p><p>
Hims &amp; Hers is a public company, traded on the NYSE under the ticker symbol &ldquo;HIMS.&rdquo; To learn more about the brand and offerings, you can visit hims.com/about and hims.com/how-it-works . For information on the company&rsquo;s outstanding benefits, culture, and its talent-first flexible/remote work approach, see below and visit www.hims.com/careers-professionals.</p><p></p><p>
Hims &amp; Hers is seeking an outstanding Managing Counsel, Privacy/AI to join our growing, collaborative Legal team. You will lead our privacy and AI legal functions to continue efforts to build our governance program and provide teams from across the company with actionable legal advice on various state and federal consumer and health privacy and AI laws, rules, and regulations impacting the products and services offered through Hims &amp; Hers. You will get to work on interesting and novel issues that arise from the intersection of healthcare, technology, and e-commerce.</p><p><b>
You Will:</b></p><ul><li><p>
Lead the Company's privacy compliance program, which will include managing a team of legal privacy experts to develop strategic and actionable compliance strategies</p></li><li><p>
Guide the development of the Company&rsquo;s AI program to address new and evolving state consumer and healthcare-related privacy and AI requirements and best practices</p></li><li><p>
Partner closely with our marketing, product and engineering teams to provide balanced and consistent legal guidance</p></li><li><p>
Provide strategic counsel to our Government Affairs team to inform and shape the Company&rsquo;s legislative efforts by providing subject matter expertise to support the review of proposed laws, rules, and regulations impacting the business</p></li><li><p>
Develop and maintain privacy and AI trainings to help educate employees on how to protect company and customer data</p></li><li><p>
Maintain subject matter expertise regarding state and federal privacy laws, including regulatory actions</p></li><li><p>
Mentor and manage a team of privacy counsel and legal professionals, contributing to a culture of collaboration, excellence, and professional growth</p></li></ul><p><b><br>
You Have:</b></p><ul><li><p>
J.D. from an ABA-accredited law school and current active license to practice law in at least one US jurisdiction</p></li><li><p>
12+ years practicing at a law firm, government, or in-house with 5+ years of advising on privacy-related issues and 2+ years or advising on AI-related matters</p></li><li><p>
2+ years of management experience with a proven ability to lead, mentor, and develop high-performing legal professionals, demonstrating strong leadership and a track record of building and retaining effective teams</p></li><li><p>
Subject matter expert on healthcare and consumer privacy and AI laws and regulations</p></li><li><p>
Demonstrated ability to build strong, trust-based partnerships with business leadership and legal peers</p></li><li><p>
Ability to adapt quickly in a dynamic, fast-paced environment</p></li><li><p>
Demonstrated time management, project prioritization, and management skills</p></li></ul><p></p><p>
We are committed to building a workforce that reflects diverse perspectives and prioritizes ethics, wellness, and a strong sense of belonging. If you're excited about this role, we encourage you to apply&mdash;even if you're not sure if your background or experience is a perfect match.</p><p></p><p>
Hims considers all qualified applicants for employment, including applicants with arrest or conviction records, in accordance with the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance, the California Fair Chance Act, and any similar state or local fair chance laws.</p><p></p><p>
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.</p><p></p><p>
Hims &amp; Hers is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please contact us at accommodations@forhims.com and describe the needed accommodation. Your privacy is important to us, and any information you share will only be used for the legitimate purpose of considering your request for accommodation. Hims &amp; Hers gives consideration to all qualified applicants without regard to any protected status, including disability. Please do not send resumes to this email address.</p><p></p><p>
To learn more about how we collect, use, retain, and disclose Personal Information, please visit our Global Candidate Privacy Statement.</p><p>
Compensation Range: $260K - $295K</p></div>

Managing Counsel, Privacy & AI

Commonwealth Bank of Australia

<div><p><b>Organization: </b>At CommBank, we never lose sight of the role we play in other people&rsquo;s financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.
<br>
<br>
<b>Job Title: </b>Risk and Control Governance, Planning and Reporting Senior Manager
<br>
<b>Location: </b>Bengaluru - Manyata Tech Park
<br>
<br>
<b>Business &amp; Team: </b>The Technology Chief Controls Office (CCO) team is a Line 1 risk team responsible for supporting CBA in continuing to mature its risk culture and establish and maintain strong risk practices. Technology CCO is responsible for providing end to end risk advice and guidance. We support our delivery teams across CommBank in their development and operation of solutions ranging across innovative product platforms for our customers to essential tools within our business.
<br>
<br>
<b>Impact and Contribution: </b>The Senior Manager, Risk and Control Enablement is part of Compliance and Privacy Risk is part of the Technology CCO team for ensuring:
</p><ul><li><p>Privacy risks for any new and changing processes are assessed, awareness is raised, risk mitigations are in place, embedded and sustainable. They achieve this by assessing the effective design and implementation of controls to enable compliance and support the business through new and changing processes.
</p></li><li><p>Provide support to Technology businesses to implement regulatory engagement, regulatory changes and compliance policy changes that affect Technology
</p></li><li><p>Operate as a centralized risk and controls function within the broader technology organization with the primary mission to enhance the organization&rsquo;s ability to deliver change safely, including building resilient Operational risk and compliance capabilities, reducing technology-related risk debt, and embedding a proactive, risk-aware culture across all technology crews.<br>
</p></li></ul><p><br>
<b>Roles &amp; Responsibilities:
</b></p><ul><li><p>Adhere to the <i>Code of Conduct </i><i>. </i>The Code of Conduct sets the standards of behaviour, actions and decisions we expect from our people.
</p></li><li><p>Lead and support Technology BU / SUs on Privacy Risk matters and Regulatory Changes to enable better risk and compliance outcomes
</p></li><li><p>Lead and coach team members conduct privacy assessments, review obligation applicability assessments, control assessments, technology risk assessments, root cause analysis of issues and incidents, identifying and implementing control improvements
</p></li><li><p>Lead and advise on effective design and implementation of controls for all new and changes to processes and operations for Privacy and Compliance
</p></li><li><p>Partner with the business to deliver pragmatic insights that enable risk based and informed decision-making and provide assurance over controls
</p></li><li><p>Advise and articulate business impacts to stakeholders on privacy and compliance policy changes and regulatory changes
</p></li><li><p>Build a proactive and high performing culture and capabilities for privacy, compliance, risk and controls.
</p></li><li><p>Possess sound technical knowledge to support and lead activities/ initiatives across other TCCO teams.
</p></li><li><p>Lead and build a proactive risk and control culture.
</p></li><li><p>Delivery of risk and control enablement initiatives to achieve better risk outcomes.
</p></li></ul><p>PEOPLE MANAGEMENT
</p><ul><li><p>Provide local line management to India resources of different portfolios.
</p></li><li><p>Coaches and nurture the broader TCCO India team members to help them grow technically.
</p></li><li><p>Drive continuous improvements and champion a learning mindset to enable a future-fit workforce<br>
</p></li></ul><p><br>
<b>Essential Skills:
</b></p><ul><li><p>Minimum 13 years&rsquo; experience in risk and/or control advisory in banking/financial services/professional services or other relevant sectors
</p></li><li><p>Strong experience working in Privacy, Technology, Operational Risk practitioner roles
</p></li><li><p>Excellent stakeholder management, communication skills, critical thinking, problem-solving skills and ability to provide constructive challenges
</p></li><li><p>Experience with project change risk (Risk in Change) and change management
</p></li><li><p>Understanding of impacts on CBA of APRA standards (not limited to CPS220, 231, 232, 234, 235) and Privacy regulations
</p></li><li><p>Strong knowledge of Privacy and Compliance Risk Frameworks
</p></li><li><p>Ability to adapt to working in complex environments with ambiguity to deliver consistent high quality business outcomes<br>
</p></li></ul><div><br>
<b>Education Qualification:
</b></div><ul><li><p>Bachelor&rsquo;s degree/Master&rsquo;s degree in Engineering in Computer Science/Information Technology
</p></li><li><p>Professional certificates like CISA, CRISC, CGEIT, CISM, ITIL, COBIT or other IT Risk related certifications (e.g. Basel II, GS007, AS3402, ISO2700x) will be preferred
</p></li></ul><p></p><div><div><div><div><div><div><div><p>If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We&rsquo;re keen to support you with the next step in your career.
</p><p></p><p>We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.
</p></div></div></div></div></div></div></div><p></p>Advertising End Date: 07/11/2025</div>

Risk and Control Governance, Planning and Reporting Senior Manager

Sagility

<div><h2 class="jobSectionHeader"><b>About Sagility</b></h2>
<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p>Sagility combines industry-leading technology and transformation-driven BPM services with decades of healthcare domain expertise to help clients draw closer to their members. The company optimizes the entire member/patient experience through service offerings for clinical, case management, member engagement, provider solutions, payment integrity, claims cost containment, and analytics. Sagility has more than 25,000 employees across 5 countries.</p></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
As an Assistant Manager in the Compliance Department of our healthcare BPO company, you will assist in overseeing various compliance initiatives and activities. You will work closely with the Compliance Manager and collaborate with cross-functional teams to develop and implement compliance policies, conduct audits, and promote a culture of compliance throughout the organization. Your attention to detail and understanding of healthcare regulations will contribute to maintaining the highest standards of compliance in the healthcare BPO industry.<p></p><div><div><div><div><div><div><div><p><b>
Job title:</b></p></div></div></div></div></div></div></div>
Assistant Manager Compliance<p></p><div><div><div><div><div><div><div><p><b>
Job Description:</b></p></div></div></div></div></div></div></div><p><b>
Education:</b></p><p>
Graduate Or Post Graduate</p><p></p><p><b>
Experience:</b></p><p>
2+ Years</p><p></p><p><b>
Preferred Skills:
</b></p><ul><li><p>Familiarity with healthcare laws, regulations, and industry standards, with a focus on data privacy and security requirements.</p></li><li><p>
Strong attention to detail and ability to analyze complex information.</p></li><li><p>
Excellent communication and interpersonal skills to collaborate effectively with cross-functional teams.</p></li><li><p>
Ability to work independently and take initiative in managing compliance-related tasks.</p></li><li><p>
High level of integrity, ethics, and the ability to handle confidential information with discretion</p></li></ul><p></p><p><b>
Roles &amp; Responsibilities:</b></p><p></p><p><b>
Responsibilities:</b></p><ul><li><p><b>
Compliance Support:</b> Assist the Compliance Manager in developing, implementing, and monitoring a comprehensive compliance program for the healthcare BPO industry. Ensure adherence to relevant laws, regulations, and industry standards, such as HIPAA, HITECH Act, GDPR, and other data privacy regulations.</p></li><li><p><b>
Policy and Procedure Development:</b> Collaborate with the Compliance Manager and other stakeholders to review, update, and implement compliance policies, procedures, and guidelines. Disseminate these materials to employees and ensure understanding and adherence.</p></li><li><p><b>
Regulatory Updates:</b> Stay informed about changes in healthcare laws and regulations and assist in communicating updates to the organization. Support the Compliance Manager in ensuring the company's practices align with regulatory requirements.</p></li><li><p><b>
Internal Audits:</b> Participate in compliance audits to assess the effectiveness of the compliance program. Assist in identifying compliance gaps and recommending corrective actions.</p></li><li><p><b>
Training and Education:</b> Assist in developing and conducting compliance training programs for employees at all levels. Help raise awareness of compliance requirements and promote a culture of ethical conduct.</p></li><li><p><b>
Vendor Due Diligence:</b> Collaborate with the vendor management team to assess and ensure compliance of third-party vendors and partners.</p></li><li><p><b>
Reporting and Documentation:</b> Assist in maintaining accurate records of compliance activities, audit findings, training completion, and policy attestations. Contribute to preparing compliance reports for senior management and the board of directors.</p></li><li><p><b>
Continuous Improvement:</b> Provide input for the enhancement of the compliance program based on industry best practices and emerging regulatory trends.</p></li></ul><p></p><div><div><div><div><div><div><div><p><b>
Location:</b></p></div></div></div></div></div></div></div>
BangaloreIndia</div></div>

Assistant Manager Compliance

STADA Arzneimittel AG

EM Legal & Compliance Manager <p>STADA is a leading manufacturer of high-quality pharmaceuticals. With a long-standing heritage rooted in pharmacies, we are perceived as a reliable and trustworthy partner since 1895. With our products we help people protect and regain a dignified and able life. With our proven Generics, we ensure that everyday health remains affordable.</p> <p>At STADA, we follow our purpose of "Caring for People's Health as a Trusted Partner". In pursuit of this purpose, we are committed to further accelerating the successful trajectory of our company.</p> <p>To our employees, we offer an attractive working environment in which they can develop personally.</p> <p><b>We are looking for :</b>Legal & Compliance Manager - Emerging Markets</p> <p><b>Areas of Responsibilities</b></p> <ul> <li>Being a pro active attorney with demonstrated compliance and commercial experience in commercial contracts and operations related to pharma and OTC business on North African Countries and GCC with special focus on KSA;</li> <li>Able to provide legal advices and support the business operations on all legal matters, identifying and mitigating the risks for the Company;</li> <li>Able to draft, review and negotiate various types of commercial contracts related to pharma business, including by way of example and not limitation: CDA, distribution agreements, M&A and licensing, indemnification agreements; experience in distribution contract terminations understanding the implications and legal ramifications associated with them, developing strategies to mitigate any adverse effects;</li> <li>Strengthens Corporate Governance of the affiliates in KSA and Egypt, knowledge of compliance regulations, antitrust law, pharma compliance best practices;</li> <li>Able to provide clear guidelines on anti bribery regulation (FCPA, Trade Sanctions and UK anti bribery), advising the company on compliance matters and implementing compliance programs (e.g. privacy, antitrust, anti money laundry regulation, Code of Conduct, Conflict of Interest, interaction with HCPs and anti bribery policies in general);</li> <li>Ensure compliance with privacy legislation across the MENA region, including data protection and privacy laws.</li> <li>Conduct investigations into compliance and privacy related issues;</li> <li>Advises Management of critical project developments and any other relevant legal and compliance with specific focus on KSA;</li> <li>Stay updated on changes in laws and regulations that may impact the organization;</li> <li>Directs/coordinates the work of outside counsel, defines project objectives and manages external counsel and expenditures in accordance with internal policies;</li> </ul> <p><b>Required Education and Experience</b></p> <ul> <li>Entrepreneurial thinking and action;</li> <li>Law education degree with experience in both: common law and civil law jurisdictions; qualified lawyer is an advantage;</li> <li>At least 3 years of in house legal and compliance experience obtained in a complex, highly regulated industry environment. Experience in the life science sector is an advantage;</li> <li>Fluency in English is required as it will be the primary language of communication within the company and with external stakeholders; Arabic and French knowledge is a plus;</li> <li>Ability to draft concise and effective contractual documents, summary and presentations to the management of the company;</li> <li>Proactive, flexible, responsive and resourceful;</li> <li>Requires strong organizational, analytical, interpersonal and time management skills.</li> <li>Extensive knowledge of contract drafting, negotiation, and management is essential.</li> <li>Experience in handling litigation cases and working with external legal counsel is necessary.</li> <li>Familiarity with GCC regulations, litigation procedures, and compliance is necessary.</li> </ul> <p><b>Competency:</b></p> <ul> <li>Integrity</li> <li>Agility</li> <li>One STADA</li> </ul> <p>If you are ready for new challenges where you can make a difference forpeople's health, you have come to the right place. We are looking for people with great attitude and passion. The next step is yours, take a look at our open positions and become part of our global STADA team!</p> <p>Please note that only successful candidates will be contacted.</p><img src="https://www.jobg8.com/Tracking.aspx?5gzGUc577o4L2qxs5F6Q6Nj3k%2bmDMRFzf" width="0" height="0" />

EM Legal & Compliance Manager

Oman Housing Bank | بنك الإسكان العُماني

<div>
 <p>
  <strong>
   Job Purpose:
  </strong>
 </p>
 <p>
  The Manager &ndash; Cyber &amp; Information Security (InfoSec) Operations supervises the bank&rsquo;s cyber defense operations, ensuring timely detection, response, and resolution of security incidents. He/ She operates incident handling, digital forensics, and third-party cybersecurity coordination while maintaining compliance with regulatory and internal security frameworks.
 </p>
 <p>
  The Manager &ndash; Cyber &amp; InfoSec Operations supports key operational security controls, drives continuous improvements in threat response, and collaborates with stakeholders to safeguard the bank&rsquo;s information assets across platforms and vendors.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Accountabilities:
  </strong>
 </p>
 <ul>
  <li>
   Manages the full lifecycle of cybersecurity incident response including detection, triage, containment, eradication, recovery, and post-incident review.
  </li>
  <li>
   Conducts forensic investigations of compromised systems and preserves digital evidence for compliance and legal use.
  </li>
  <li>
   Updates and tests the incident response plan and playbooks to ensure readiness.
  </li>
  <li>
   Investigates security incidents such as unauthorized access, insider threats, and external attacks.
  </li>
  <li>
   Interfaces with MSSPs and third-party vendors for alert triage, escalation, and monitoring performance.
  </li>
  <li>
   Optimizes SIEM rules, detection logic, and response workflows with vendors and internal teams.
  </li>
  <li>
   Conducts regular meetings with vendors to review SLAs, resolve issues, and improve service levels.
  </li>
  <li>
   Evaluates emerging cybersecurity technologies and engages with vendors to enhance capabilities.
  </li>
  <li>
   Conducts risk assessments, vulnerability scans, and penetration testing to identify and mitigate threats.
  </li>
  <li>
   Implements and maintains the Bank&rsquo;s information security program in compliance with regulatory and business standards.
  </li>
  <li>
   Develops and enforces cybersecurity policies, standards, and procedures in alignment with frameworks (ISO 27001, CBO, MTCIT).
  </li>
  <li>
   Manages ISO 27001 certification efforts and maintains ISMS documentation and audit readiness.
  </li>
  <li>
   Maintains the cybersecurity risk register, audit findings, and remediation tracking.
  </li>
  <li>
   Performs user access reviews and privileged access reviews for critical systems in compliance with RBAC and regulatory requirements.
  </li>
  <li>
   Manages enforcement of PAM controls and maintains evidence of periodic access reviews.
  </li>
  <li>
   Approves firewall, system, and administrative access changes as the designated ISO authority.
  </li>
  <li>
   Coordinates with HR to manage onboarding and offboarding access controls for staff, vendors, and contractors.
  </li>
  <li>
   Provides security input for new IT and business projects, ensuring risk mitigation is embedded in solution design.
  </li>
  <li>
   Conducts security assessments, architectural reviews, and integration support for new systems.
  </li>
  <li>
   Communicates incident updates, risks, and resolutions to stakeholders across IT, Legal, Compliance, and Business Units.
  </li>
  <li>
   Develops and delivers cybersecurity awareness and training programs to staff.
  </li>
  <li>
   Fosters a culture of accountability, proactive defense, and information security ownership.
  </li>
  <li>
   Leads cyber drill simulations and incident response exercises to improve response capabilities.
  </li>
  <li>
   Ensures compliance with data protection regulations and internal privacy policies.
  </li>
  <li>
   Develops and maintains privacy notices, consent forms, and data handling procedures.
  </li>
  <li>
   Manages data subject access requests and leads investigations into privacy-related incidents.
  </li>
  <li>
   Acts as the main liaison with Data Protection Authorities during audits or investigations.
  </li>
  <li>
   Executes the information security roadmap aligned with enterprise risk strategy.
  </li>
  <li>
   Ensures ongoing adherence to cybersecurity best practices, regulatory mandates, and corporate security policies.
  </li>
  <li>
   Maintains high standards of professionalism, accuracy, and integrity in all operational duties.
  </li>
  <li>
   Collaborates with internal functions to sustain an enterprise-wide security and privacy posture.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications and Experience:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor Degree in Information Security, Cybersecurity, Information Systems or a related field.
  </li>
  <li>
   Professional certification in Information Security such as: GCIH, GCFA, GCFE, CISSP, CEH, CISM, ISO 27001) is preferred.
  </li>
  <li>
   Minimum of 4 years of experience with at least 2 years in a banking or a regulated environment.
  </li>
  <li>
   Familiarity with using cybersecurity tools such as SIEM, EDR and forensic platforms.
  </li>
  <li>
   Demonstrates familiarity with country-specific information security regulations and expertise.
  </li>
  <li>
   Strong knowledge of related ISO such as ISO 27001 and related global standards.
  </li>
  <li>
   Ability to conduct risk assessments, vulnerability assessments and penetration testing.
  </li>
  <li>
   Ability to develop IS standards, procedures and controls.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Applicants who are meeting the job requirements will be contacted.
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   ** Applications will be accepted until 02-Nov-2025 at 2:00 P.M
  </strong>
 </p>
 <p>
  <strong>
   Submissions received after this date and time will not be considered **
  </strong>
 </p>
</div>


Manager – Cyber & InfoSec Operations

Search 10000+ Privacy compliance manager jobs near you this October. New roles added regularly across leading industries. Apply today.