Technology Risk Vice President

• Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions.
• Review proposed technology solutions and architectures to ensure security requirements are incorporated by design.
• Perform threat modelling and security risk assessments for new technologies and business initiatives.
• Define and assess security baselines and configuration standards.
• Provide security recommendations for enterprise architecture and technology transformation initiatives.

• Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments.
• Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring.
• Support security governance for container environments.
• Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions.
• Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers.
• Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments.

• Lead application security assessments throughout the software development lifecycle.
• Establish and enhance secure SDLC and DevSecOps practices.
• Integrate security testing and controls into CI/CD pipelines.
• Oversee SAST, DAST, SCA, penetration testing, and application security reviews.
• Work closely with development teams to identify and remediate application security vulnerabilities.
• Promote security-by-design principles across application development and technology projects.

• Oversee enterprise vulnerability management and risk-based vulnerability remediation.
• Manage penetration testing activities for applications, infrastructure, and external-facing systems.
• Coordinate internal and external penetration testing engagements and track remediation.
• Establish vulnerability management KPIs, KRIs, risk acceptance processes, and remediation timelines.
• Chair or facilitate vulnerability remediation governance forums where required.
• Identify recurring vulnerabilities and drive improvements to the organization’s overall security posture.

• Provide governance and oversight of security monitoring and incident response capabilities.
• Work with SOC and security operations teams to improve detection, response, and remediation processes.
• Review SIEM use cases, security monitoring requirements, and incident management processes.
• Support major cybersecurity incident investigations and post-incident improvement activities.
• Ensure lessons learned from incidents are incorporated into security controls and risk management processes.

• Act as a deputy to the Information Security Officer when required, ensuring business continuity and ongoing execution of cybersecurity governance, risk management, compliance, and assurance activities.
• Provide analytical and administrative support to cybersecurity governance forums, risk committees, and management review meetings, including the preparation of presentations, reports, and action tracking.
• Support internal, external, and regulatory audits through evidence collection, stakeholder coordination, tracking of findings, and monitoring of remediation activities.
• Prepare and maintain cybersecurity metrics, dashboards, risk reports, KPIs, KRIs, and management reporting materials for governance and oversight purposes.
• Perform cybersecurity assurance activities and control effectiveness reviews to support the evaluation of the Group’s cybersecurity maturity and control environment.

Preferred Certifications

• OSCP – Offensive Security Certified Professional
• CEH – Certified Ethical Hacker
• CHFI – Computer Hacking Forensic Investigator
• CISSP – Certified Information Systems Security Professional
• CISM – Certified Information Security Manager

Educational Qualifications Required

• Bachelor or Master degree in Computer or IT or any related fields

Experience Requirements

• More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance
• Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards.
• Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities.
• Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, DevSecOps, vulnerability assessment, penetration testing, security operations and information security incident management.

• Cloud Security
• AI Security
• Application Security
• DevSecOps
• Vulnerability Management
• Penetration Testing
• Threat Modelling

• SIEM and Security Monitoring
• Executive Reporting and Stakeholder Management

• Strong analytical and risk-based decision-making capability.
• Ability to translate technical cybersecurity issues into business risks.
• Strong understanding of regulatory and compliance requirements.
• Ability to lead cybersecurity initiatives across multiple business and technology functions.
• Excellent stakeholder and executive communication skills.
• Ability to balance governance requirements with practical technology and business needs.
• Strong leadership, influencing, and problem-solving capabilities.

Email address

Upload your CV/resume or any other relevant file.

Max. file size: 256 MB.

Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank.

We are looking for top-tier individuals who are passionate and hungry to add value from day one.

Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow.

We are looking for an

Key Responsibilities

• Conduct security reviews of enterprise infrastructure, applications, cloud environments, networks, databases, middleware, and security solutions.
• Review proposed technology solutions and architectures to ensure security requirements are incorporated by design.
• Perform threat modelling and security risk assessments for new technologies and business initiatives.
• Define and assess security baselines and configuration standards.
• Provide security recommendations for enterprise architecture and technology transformation initiatives.

• Assess and strengthen security controls across Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure environments.
• Conduct cloud security assessments covering identity, network security, workloads, containers, data protection, logging, and monitoring.
• Support security governance for container environments.
• Conduct security and risk assessments of AI, Generative AI, Machine Learning, and emerging technology solutions.
• Assess security controls and compliance requirements for AI-powered applications and third-party AI service providers.
• Establish appropriate security controls for cloud-native, AI-enabled, and emerging technology environments.

• Lead application security assessments throughout the software development lifecycle.
• Establish and enhance secure SDLC and DevSecOps practices.
• Integrate security testing and controls into CI/CD pipelines.
• Oversee SAST, DAST, SCA, penetration testing, and application security reviews.
• Work closely with development teams to identify and remediate application security vulnerabilities.
• Promote security-by-design principles across application development and technology projects.

• Oversee enterprise vulnerability management and risk-based vulnerability remediation.
• Manage penetration testing activities for applications, infrastructure, and external-facing systems.
• Coordinate internal and external penetration testing engagements and track remediation.
• Establish vulnerability management KPIs, KRIs, risk acceptance processes, and remediation timelines.
• Chair or facilitate vulnerability remediation governance forums where required.
• Identify recurring vulnerabilities and drive improvements to the organization’s overall security posture.

• Provide governance and oversight of security monitoring and incident response capabilities.
• Work with SOC and security operations teams to improve detection, response, and remediation processes.
• Review SIEM use cases, security monitoring requirements, and incident management processes.
• Support major cybersecurity incident investigations and post-incident improvement activities.
• Ensure lessons learned from incidents are incorporated into security controls and risk management processes.

• Act as a deputy to the Information Security Officer when required, ensuring business continuity and ongoing execution of cybersecurity governance, risk management, compliance, and assurance activities.
• Provide analytical and administrative support to cybersecurity governance forums, risk committees, and management review meetings, including the preparation of presentations, reports, and action tracking.
• Support internal, external, and regulatory audits through evidence collection, stakeholder coordination, tracking of findings, and monitoring of remediation activities.
• Prepare and maintain cybersecurity metrics, dashboards, risk reports, KPIs, KRIs, and management reporting materials for governance and oversight purposes.
• Perform cybersecurity assurance activities and control effectiveness reviews to support the evaluation of the Group’s cybersecurity maturity and control environment.

Preferred Certifications

• OSCP – Offensive Security Certified Professional
• CEH – Certified Ethical Hacker
• CHFI – Computer Hacking Forensic Investigator
• CISSP – Certified Information Systems Security Professional
• CISM – Certified Information Security Manager

Educational Qualifications Required

• Bachelor or Master degree in Computer or IT or any related fields

Experience Requirements

• More than 10 years of experience in Cybersecurity / Technology Risk Assessment and Assurance
• Experience supporting compliance with recognized frameworks and regulations such as ISO 27001, NIST, NIA, QCSF, PCI DSS, GDPR, PDPL, or similar standards.
• Hands-on experience conducting cybersecurity risk assessments, control reviews, and security assurance activities.
• Skilled in enterprise security architecture reviews, cloud, AI, emerging technologies security reviews, application security reviews, DevSecOps, vulnerability assessment, penetration testing, security operations and information security incident management.

• Cloud Security
• AI Security
• Application Security
• DevSecOps
• Vulnerability Management
• Penetration Testing
• Threat Modelling

• SIEM and Security Monitoring
• Executive Reporting and Stakeholder Management

• Strong analytical and risk-based decision-making capability.
• Ability to translate technical cybersecurity issues into business risks.
• Strong understanding of regulatory and compliance requirements.
• Ability to lead cybersecurity initiatives across multiple business and technology functions.
• Excellent stakeholder and executive communication skills.
• Ability to balance governance requirements with practical technology and business needs.
• Strong leadership, influencing, and problem-solving capabilities.