Job Description

Roles & Responsibilities

Develop and implement the organization s Information Security Strategy, Framework, and Roadmap. Ensure compliance with Central Bank of Jordan (CBJ) cybersecurity and information security requirements. Lead cybersecurity risk assessments, maintain risk registers, and oversee mitigation plans. Establish and maintain security policies, standards, procedures, and controls. Oversee Security Operations Center (SOC) activities, including monitoring, incident detection, response, and reporting. Manage internal and external Penetration Testing (PT) and Vulnerability Assessments (VA), including remediation tracking. Drive implementation and continuous improvement of: ISO 27001 Information Security Management System (ISMS) ISO 27701 Privacy Information Management System (PIMS) ISO 22301 Business Continuity Management System (BCMS) Align cybersecurity practices with the NIST Cybersecurity Framework (CSF) and CIS Critical Security Controls. Oversee Business Continuity and Disaster Recovery (BCP/DRP) planning, testing, and maintenance. Manage third-party security risks and ensure vendors comply with information security, privacy, and regulatory requirements. Review and validate contracts and Service Level Agreements (SLAs) to ensure alignment with cybersecurity standards. Provide regular cybersecurity and risk reporting to senior management and relevant committees.

Desired Candidate Profile

Bachelor s degree in information security, Cybersecurity, Computer Science, Information Technology, or a related field. Minimum 8 years of experience in Information Technology, with at least 4 years in Information Security or Cybersecurity roles. Professional certification is mandatory, such as: Certified Information Security Manager (CISM) ISO 27001 Lead Implementer Strong knowledge of cybersecurity governance, risk management, and regulatory compliance frameworks. Hands-on experience implementing and maintaining ISO 27001, ISO 27701, and ISO 22301 standards. Practical understanding of NIST CSF and CIS Controls. Experience managing SOC operations, incident response, vulnerability management, and threat monitoring. Familiarity with banking systems, data protection laws, and financial-sector cybersecurity regulations. Excellent analytical, communication, leadership, and stakeholder management skills.