Manager, Identity and Access Management

DESCRIPTION

Operating in the UAE for over ‎50 years, CBD manages the financial requirements
of some of the largest corporates and businesses operating in the country,
driving the UAE economy. Over the years, CBD has transformed into a
progressive and modern banking institution winning multiple awards for its
digital initiatives, credit cards, bank accounts, mobile app features and
services.

CBD has been recognized as the number one bank in the UAE on the Forbes list
of The World's Best Banks ‎2022.

As we continue to build upon our successes, we are looking for ambitious
individuals who are passionate about the banking and finance industry and the
markets in which CBD operates. Just as important to us is your ability to
demonstrate a talent for dealing with people - your colleagues and our
customers - and delivering service that really goes the extra mile.

Job Purpose

Responsible to ensure that the Bank has a sound controls framework for
identity management, user privileges review and application security
monitoring of all critical banking applications, through the implementation
and maintenance of appropriate policies, procedures, standards and guidelines.
As well as, responsible for managing the IAM (Identity and Access Management)
initiatives.

Principal Accountabilities
*
Assist Head of Tech Risk managing the IAM team responsible for user management
and access privileges review of banking applications.
*
Develop appropriate policies, standards, processes, procedures, checklists,
and guidelines related to IAM of banking applications.
*
Create and Manage the Email DLP policies.
*
Review Data Loss Prevention (DLP) incidents on regular basis and escalate the
non - compliant item to Head of Tech Risk.

• Minimize the DLP incidents by whitelisting the incidents by scrutinizing the incidents with Risk & Business perspective.


• Create and distribute monthly phishing simulations to maintain Phishing
  susceptibility rate below ‎5% and analysing response data for further
  enhancement and action against repeated offenders.


• Create Information Security Awareness program, artwork and infographics and distribute across CBD to spread the awareness related to Information Security.


• Create and distribute the monthly Patch Compliance reports to IT.


• Timely mitigation of risks identified by Internal Audit, by tracking,
  following-up and addressing all observations.


• Implement data analysis procedures using analytical applications to dig out
  exceptions and violations in existing banking applications.


• Implement and review security matrix, with the definition of all user roles
  and its privileges, for all critical banking applications and ensuring that
  access is provided based on job descriptions of the staff at different l


• evels.


• Periodical review of user rights in the banking applications to ensure that
  they are as per the job requirements.


• Review any changes in controls arising from the introduction of new
  products/processes and ensure these are being implemented or adhered to by
  liaising with concerned business units.


• Provide support and guidance to staff (IAM) and also provide training for
  concerned staff at Branches/HO Departments.


• The jobholder has to play key role in designing and proposing key processes
  and procedures to maintain sound and secure banking applications, when it
  comes to identity and access management.


• The jobholder recommends appropriate approaches to monitor and follow-up any
  security related issues related to critical banking applications.


• The jobholder leads the IAM team, support and assists internal stakeholders.


• Report to Head of Technology Risk on a daily basis on various matters related
  to identity and access management.


• Prepare and follow-up different IAM reports on a regular basis.


• Total number of reporting staff: ‎2