Chief Manager (Technology Risk)

Chief Manager (Technology Risk) – People’s Bank

Job Overview

Job Title: Chief Manager – Technology Risk
Company: People’s Bank
Job Location: Colombo 02, Sri Lanka
Employment Type: Permanent
Job Grade: Chief Manager (Grade I)
Industry: Banking & Financial Services / Technology Risk

People’s Bank, a premier bank in Sri Lanka with the country’s largest customer base, is seeking a talented and dynamic professional for the position of Chief Manager – Technology Risk. The role provides leadership to the Technology Risk Unit within the Risk Management Department and focuses on technology risk, cybersecurity risk, regulatory compliance and information security.

Position Details

• Position: Chief Manager – Technology Risk
• Company: People’s Bank
• Job Location: Colombo 02, Sri Lanka
• Job Grade: Chief Manager (Grade I)
• Employment Type: Permanent
• Preferred Age: Below 50 years as at the closing date
• Application Deadline: 21 September 2026
• Department: Risk Management – Technology Risk Unit

Company Overview

People’s Bank is a premier bank in Sri Lanka with the largest customer base, providing innovative financial solutions to a diversified clientele for over six decades. The Bank provides a professional environment for individuals who strive for excellence and professionalism.

Qualifications & Experience

Candidates should possess one of the following qualifications:

• Certified Information Systems Security Professional (CISSP) – (ISC)².
• GIAC Information Security Professional (GISP).
• Certified Information Security Manager (CISM) – ISACA.
• Certified in Risk and Information Systems Control (CRISC) – ISACA.
• Master’s Degree in Information Security.
• Master’s Degree in Computer Science / Information Technology specializing in Information Security.

Additionally:

• Applicants possessing an eligible professional qualification must complete the relevant CPD requirements or 20 CPD hours annually.
• Minimum 1 year of managerial-level experience in a Licensed Commercial Bank, Licensed Specialized Bank or Licensed Non-Bank Financial Institution.
• Candidates should be able to provide leadership to the Technology Risk Unit and implement regulatory requirements, Bank policies and market best practices relating to Technology Risk and Cybersecurity Risk.

Key Responsibilities

Planning & Reporting

• Develop, establish and implement policies and frameworks for IT security and risk management.
• Monitor, analyse and report information relating to the Bank’s information safety and security measures.
• Prepare Technology Risk reports for Board and Management Committees as required by the DGM – Risk Management.

Technology Risk Management

• Perform and monitor technology risk assessments across the Bank.
• Identify, describe and quantify technology risks affecting business operations.
• Review technology risk-related disaster recovery procedures.
• Prepare technology risk management plans supporting the Bank’s business continuity plan.
• Monitor and analyse technology risk-related security alerts.
• Implement and periodically review the Risk and Control Self-Assessment (RCSA) process for IT and information security services, including third-party service providers.
• Conduct quarterly RCSA processes for IT and information security-related services.
• Establish, review and monitor Key Risk Indicators (KRIs) relating to Technology Risk Management.
• Establish and maintain a comprehensive technology risk management process in line with CBSL Direction No. 16 of 2021 and its addendums.
• Ensure compliance with the applicable CBSL Direction and addendums.
• Monitor achievement of technology risk management action plans.

Cybersecurity, Governance & Stakeholder Management

• Align technology risk initiatives with business objectives.
• Assess and report reputational-risk incidents arising from technology risks.
• Recommend mitigation actions to manage potential reputational and financial losses.
• Represent the Risk Management Department at Management Committees.
• Conduct IT-related awareness sessions for Bank staff.
• Coordinate with Information Security, Information Technology, Digital, Data Protection, regulators and internal/external auditors.
• Prepare and implement strategic plans for the Information Technology Unit on an ongoing basis.

Technology & Business Risk Assessment

• Analyse technology risks when introducing new technology-driven products or services.
• Report IT vulnerabilities and recommended mitigating measures.
• Review key IT projects from a technology-risk perspective.

Relationship & Stakeholder Management

• Maintain relationships with the ISO Unit, IT Department and Internal Audit Department.
• Establish effective communication channels with Enterprise Risk Management, Operational Risk Management and other risk partners.
• Develop and maintain an external network with senior IT risk managers and relevant risk forums.

Required Skills

• Strong knowledge of Technology Risk Management and cybersecurity.
• Technical knowledge of IT systems and digital products used within banking.
• Strong communication and presentation skills, particularly in technology risk.
• Ability to comply with regulatory qualification requirements determined by CBSL.
• Ability to increase employee awareness through education and training.
• Strong understanding of emerging technology developments and potential technology threats.
• Ability to analyse and re-engineer information security measurements.
• Strong risk assessment and risk management capabilities.
• Leadership skills to manage the Technology Risk Unit.
• Ability to coordinate effectively with IT, Information Security, Digital, Data Protection, Audit and regulatory stakeholders.

Salary & Benefits

• Attractive and negotiable remuneration package.
• Remuneration will be commensurate with qualifications and experience.
• Permanent appointment.
• Annual performance evaluation.
• Opportunity to lead Technology Risk within a major Sri Lankan banking institution.

How to Apply

Applicants are required to complete the relevant People’s Bank Application Form available through the Bank’s career application process.

Completed applications should be submitted via email to:

Email: itrecruit@peoplesbank.lk

Application Deadline: 21 September 2026

The position applied for must be clearly stated in the subject line of the email. An email confirmation of receipt will be sent after the application is received.

Address:
Deputy General Manager (Human Resources)
People’s Tower – Level 14
No. 374, Dr. Colvin R. de Silva Mawatha
Colombo 02, Sri Lanka

Important Notes

• The position is equivalent to Chief Manager (Grade I) at People’s Bank.
• The appointment will be made on a permanent basis.
• Performance will be evaluated annually.
• Candidates should preferably be below 50 years of age as at the application closing date.
• Minimum 1 year of managerial-level experience in a licensed banking or non-bank financial institution is required.
• One of the specified professional qualifications or relevant Master’s Degree qualifications is required.
• Applicants with eligible professional qualifications must fulfil relevant CPD requirements or complete 20 CPD hours annually.
• Incomplete applications or applications that do not comply with the specified requirements will be rejected.
• Canvassing or attempts to influence the selection process will result in disqualification.
• Only shortlisted applicants will be called for an interview.

Source :

Download Job Details

Download APplication Form