Manager (Information Security Operations) – People's Bank Colombo 02

About the job

We are seeking highly motivated and detail-oriented Legal Interns to join our team for a period of 11 months. The selected interns will work closely with the Bank's Legal Officers, gaining practical experience in legal documentation and handling legal-related matters. This is an ideal opportunity for you to learn the basics in stepping into your fully fledged legal career.

Duties & Responsibilities:

• Collaborate with the CISO and key stakeholders to enhance the current information security program, leading and managing security projects to ensure they are completed on time, within scope, and within budget. 
• Support security operations functions which include but are not limited to SIEM, DLP, PAM and other security implementations and administration as required. 
• Independently review / analyze, investigate the security alerts/events via sophisticated cybersecurity/event management tools to identify areas for improvement and provide recommendations and support for incident response/recovery where necessary. 
• Oversee the internal SOC operations by monitoring security incidents and ensuring prompt analysis and resolution within the defined timeframe, while leading the incident response team in managing and resolving these incidents. 
• Develop strategies to anticipate emerging threats, detect potential attacks, and strengthen the Bank’s defenses, while providing regular updates to top management on new security threats and evolving threat vectors. 
• Evaluating the information security risks and vulnerabilities involved in system changes and the launch of new technologies/products/business activities, and making appropriate recommendations. 
• Develop meaningful security metrics and reports that accurately reflect the organization’s security posture, enabling informed, risk-based decision-making. Generate actionable, threat-based reports based on security testing results. 
• Continuously research and evaluate emerging security threats and trends, recommending and implementing appropriate security controls. 
• Oversee critical technical functions, including digitalization initiatives, customer data protection, information security aspects, etc.

Expected Qualifications:

• Possess a Bachelor’s degree or a Master’s degree in Information Security 

or Information Technology specialized in information security by a university or a degree-awarding institute recognized by the University Grants Commission of Sri Lanka. 

         Or  

• Possess a Bachelor’s degree or a Master’s degree in Information Technology from a university or a degree-awarding institute recognized by the University Grants Commission of Sri Lanka, with at least one of the following professional certifications. 
  • Certified Information Systems Security Professional (CISSP)   
  • Certified Information Security Manager (CISM)   
  • Certified in Risk and Information Systems Control (CRISC)   
  • Certified Ethical Hacker (CEH) 

Required Experience: 

• Minimum 03 years proven work experience in information or system security engineering / Security Assessments / SOC Operation, and/or related functions/areas. 
• Hands-on experience in vulnerability assessments and penetration testing. 
• Working with SIEM technologies is an added advantage. 
• Strong understanding of information security principles, practices, and technologies. 
• Knowledge and experience in E-Commerce, M-Commerce, Payment Card Security, Compliance, and regulatory / industry standard certifications. (PCI DSS, ISO 27001, CBSL- Directions) 
• Sound knowledge of industry trends, emerging technologies &, and specific threats targeting financial institutions. 
• Possess excellent analytical and problem-solving skills. 
• Possess excellent written and verbal communication skills. 

Age Limit:

Preferably below 45 years as at the closing date of the application

Remuneration: 

An attractive and negotiable remuneration package commensurate with qualifications and experience will be offered to the selected candidate. 

General Conditions:

The candidate should be a citizen of Sri Lanka

Method of Selection: 

Shortlisted applicants based on the stipulated qualifications and experience will be called for an interview. The appointment will be made on a fixed-term contract.

Method of Application:

• The applicants must fill in the Application form on the Career page of the People’s Bank website and send the duly filled application along with Curriculum Vitae and other necessary supporting documents. The post applied for must be clearly stated in the subject line of the Email and must be sent to the Email address: itrecruit@peoplesbank.lk on or before 07.10.2025 
• An Email confirmation of receipt will be sent upon receipt of the curriculum vitae. In the event a confirmation has not been received within a reasonable period of time, you may inquire regarding the application at the telephone numbers 0112481542/0112481416. 
• All applications will be treated in strict confidentiality, and any form of canvassing will be regarded as a disqualification. All incomplete and non-compliant applications will be rejected. 
• The Bank reserves the right to decide the number of vacancies, postponement or cancellation of recruitment, or on any other information not included in the advertisement.