(13 / 10 / 2025) Specialist, Cybersecurity Regulatory & Compliance Officer, Technology and Operations

Business Function

Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Job Purpose

The Cybersecurity Regulatory and Compliance Officer is responsible for ensuring the organization’s cybersecurity practices comply with applicable laws, regulations, frameworks, and internal policies. This role bridges the gap between cybersecurity operations and legal / regulatory obligations, ensuring the organization maintains a robust, compliant security posture in a rapidly evolving threat and regulatory landscape.

Key Responsibilities

• Monitor cybersecurity regulations and frameworks (e.g., NIST, ISO 27001, DPDP, PCI-DSS, CIS controls) relevant to the organization’s operations and industry.
• Translate regulatory cybersecurity requirements into actionable internal controls and risk mitigation strategies.
• Collaborate with IT, security, audit, and business teams to develop and enforce cybersecurity policies and procedures.
• Conduct regular assessments, audits, and gap analyses to ensure compliance with cybersecurity standards and best practices.
• Support preparation and response for internal audits, external audits, assessments, and certification efforts (e.g., ISO 27001, PCI-DSS).
• Track regulatory changes and provide timely updates to stakeholders, ensuring policies and controls remain current.
• Manage cybersecurity risk registers and contribute to enterprise risk management initiatives.
• Oversee cybersecurity incident reporting and ensure compliance with breach notification laws.
• Prepare and submit cybersecurity-related regulatory filings, documentation, and reports.
• Deliver internal training and awareness on cybersecurity compliance requirements and secure practices.

Qualifications

Preferred Experience