Principal Engineer Cybersecurity Assurance

The new NCBA has harnessed the power of both NIC and CBA to create a bank that brings together the best of both worlds from cutting edge mobile banking to good old-fashioned relationship management; from scalable business banking to financial services that grow as your business does; from best-in-class choice of products to investment solutions tailored to your specific needs.

Principal Engineer Cybersecurity Assurance

Job Purpose Statement

The Cybersecurity Assurance Specialist role will be responsible for conducting General IT Controls (GITC) assessments within production systems. This proactive role aims to audit production environments before compliance teams flag potential issues, ensuring vulnerabilities, gaps, and misconfigurations are identified and remediated. The primary focus will be on auditing critical IT controls and configurations to maintain and enhance the organization’s security posture. For issues that cannot be immediately addressed, the role will ensure they are properly documented in the Risk Control Self-Assessment (RCSA) for further remediation and mitigation.

Key Accountabilities (Duties and Responsibilities)

Proactive GITC Auditing and Vulnerability Identification 30%

• Conduct regular audits of production systems to assess GITC and identify gaps in configurations, security controls, and vulnerabilities.

• Perform a thorough review of access controls, system configurations, data integrity, and compliance with internal policies and industry standards.

• Identify security risks and proactively recommend appropriate remediation actions to mitigate threats.

Risk Control Self-Assessment (RCSA) Documentation 30%

• Work closely with Governance and Compliance teams to document key findings in the RCSA.

• For any gaps or issues that cannot be immediately resolved, ensure they are properly recorded and tracked in the RCSA, with clear action plans for resolution.

• Continuously review and update the RCSA to reflect the current security and compliance posture of production systems.

Collaboration and Reporting 20%