IT Risk Specialist

Job Overview

Merchant Bank of Sri Lanka & Finance PLC (MBSL), a subsidiary of the Bank of Ceylon, is seeking a highly motivated and experienced IT Risk Specialist – Deputy Manager / Assistant Manager Grade to strengthen its Information Security and Risk Management function.

The successful candidate will play a key role in safeguarding organisational information assets, managing security risks, ensuring regulatory compliance, and supporting business continuity initiatives.

Job Title: IT Risk Specialist
Grade: Deputy Manager / Assistant Manager
Company: Merchant Bank of Sri Lanka & Finance PLC (MBSL)
Location: Colombo District, Sri Lanka
Closing Date: 23 September 2026

Position Details

• Manage and monitor Information Security risks across the organisation.
• Oversee Privileged Access Management (PAM) and Risk Assessment & Risk Treatment (RART) processes.
• Conduct security risk assessments and recommend appropriate mitigation strategies.
• Support the implementation and continuous improvement of the Information Security Management System (ISMS).
• Review information security policies, procedures, and standards.
• Support Business Continuity Planning initiatives and information security controls.

Company Overview

Merchant Bank of Sri Lanka & Finance PLC (MBSL) is a leading financial institution and a subsidiary of the Bank of Ceylon. The organisation is committed to delivering innovative financial solutions while upholding high standards of corporate governance, information security, and regulatory compliance.

Qualifications & Experience

• Bachelor’s Degree in Information Technology, Computer Science, Information Security, Cyber Security, or a related discipline from a recognised university.
• Minimum 3–5 years of experience in Information Security, IT Risk Management, Cyber Security, IT Governance, IT Audit, or a related field.
• Experience with relevant professional standards will be an added advantage.
• Hands-on experience in:
  • ISMS implementation
  • IT risk assessments
  • Security monitoring
  • Compliance reviews
  • Business Continuity Management (BCM)
• Strong analytical, problem-solving, report-writing, and presentation skills.
• Ability to recommend practical risk mitigation measures.
• Advanced proficiency in MS Excel, including data analysis and reporting.

Key Responsibilities

• Manage and monitor Information Security risks across the organisation.
• Oversee Privileged Access Management (PAM) and Risk Assessment & Risk Treatment (RART) processes.
• Conduct security risk assessments and recommend mitigation strategies to address identified vulnerabilities.
• Support the implementation, maintenance, and continuous improvement of the Information Security Management System (ISMS).
• Review the confidentiality, integrity, and availability of information assets and IT infrastructure.
• Support Business Continuity Planning (BCP) initiatives.
• Monitor key security controls, including Active Directory, encryption, and information classification.
• Monitor physical access controls, biometric authentication systems, and environmental security measures.
• Review security incidents, logs, and events and recommend corrective actions and control improvements.
• Review IT and Information Security policies, procedures, and standards to ensure compliance and effectiveness.

Required Skills

• Strong knowledge of Information Security and IT Risk Management.
• Knowledge of Cyber Security, IT Governance, and IT Audit practices.
• Experience in information security risk assessments and mitigation.
• Understanding of ISMS implementation and security monitoring.
• Knowledge of Business Continuity Management and BCP processes.
• Strong analytical and problem-solving abilities.
• Excellent report-writing and presentation skills.
• Advanced Microsoft Excel and data analysis skills.
• Strong attention to detail.
• Ability to assess risks and recommend practical security controls.
• Good understanding of regulatory and internal compliance requirements.

Salary & Benefits

• An attractive remuneration package is offered to the selected candidate.
• Career progression opportunities are available for the right candidate.

How to Apply

Interested candidates should apply using the application button provided with this job post.

Applications can also be submitted by email to:

careers.mbsl@mbslbank.com

Only shortlisted candidates will be contacted for further evaluation and interview arrangements.

Important Notes

• Grade: Deputy Manager / Assistant Manager.
• Experience: Minimum 3–5 years in a relevant field.
• Closing Date: 23 September 2026.
• Selection will be strictly based on merit.
• Any form of canvassing or attempt to influence the recruitment process will result in disqualification.
• Only shortlisted candidates will be contacted.