Engineer (IT Security)

Engineer (IT Security) – Commercial Bank of Ceylon PLC

Job Overview

Commercial Bank of Ceylon PLC, Sri Lanka’s most awarded bank, is seeking a skilled and security-focused Engineer – IT Security to strengthen its cybersecurity operations. This role is ideal for professionals with experience in vulnerability assessment, penetration testing, information security, and compliance who are passionate about protecting enterprise systems and digital banking services.

Job Category: Information Technology, Cyber Security, Banking, Private Jobs

Position Details

Position: Engineer – IT Security
Company: Commercial Bank of Ceylon PLC
Employment Type: Full-Time
Industry: Banking / Information Technology / Cyber Security
Job Location: Sri Lanka
Workplace: On-site

Company Overview

Commercial Bank of Ceylon PLC is Sri Lanka’s most awarded bank and one of the country’s leading financial institutions. Renowned for innovation and digital banking excellence, the bank continues to invest in advanced cybersecurity technologies to safeguard its customers, systems, and digital services.

Job Summary

The Engineer – IT Security will be responsible for conducting security assessments, managing vulnerability remediation, supporting compliance initiatives, and strengthening the bank’s overall cybersecurity posture. The role requires expertise in penetration testing, vulnerability management, security controls, and information security frameworks.

Key Responsibilities

• Lead the Bank’s security assessment program across networks, applications, and systems.
• Analyze identified vulnerabilities and coordinate remediation activities with internal IT teams.
• Manage vulnerability remediation workflows while tracking SLAs and closure rates.
• Prepare management dashboards and detailed security reports.
• Review system configurations, network architectures, and IT processes to validate security controls.
• Develop and maintain the Bank’s information security roadmap.
• Monitor emerging cyber threats and provide recommendations to strengthen security.
• Conduct security awareness and training sessions for IT teams.
• Support ISO 27001 and PCI DSS compliance activities and certification renewals.
• Assist in developing, enforcing, and maintaining IT security policies, procedures, and standards.
• Perform additional IT security tasks assigned by management.

Qualifications & Experience

• Bachelor’s Degree in Information Security, Computer Science, Information Technology, or a related discipline specializing in Information or Cyber Security.
• Minimum 2 years of experience in Vulnerability Assessment and Penetration Testing.
• Professional security certifications such as CEH, eJPT, Security+, or equivalent are preferred.
• Experience performing automated and manual security assessments of web applications, mobile applications, operating systems, and network devices.
• Hands-on experience with vulnerability scanning and penetration testing tools.
• Strong understanding of security risk assessment and vulnerability management.

Technical Skills

• Vulnerability Assessment & Penetration Testing (VAPT)
• Information Security
• Cyber Security
• Vulnerability Management
• Security Risk Assessment
• Network Security
• Web Application Security
• Mobile Application Security
• Operating System Security
• Windows & Linux Security
• TCP/IP, HTTP, TLS, SSH, DNS
• Vulnerability Scanning Tools
• Penetration Testing Tools
• ISO 27001
• PCI DSS
• Security Reporting & Dashboards
• Security Policies & Compliance

Soft Skills

• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills.
• Ability to explain technical vulnerabilities to both technical and business stakeholders.
• Strong documentation and reporting skills.
• Ability to work under pressure and manage multiple security priorities.
• Team collaboration and stakeholder management.

Salary & Benefits

• Attractive remuneration package in line with leading financial institutions.
• Opportunity to work with Sri Lanka’s most awarded bank.
• Exposure to enterprise-level cybersecurity infrastructure.
• Professional development and certification opportunities.
• Dynamic and technology-driven working environment.

How to Apply

Interested candidates should submit their application through the Commercial Bank Careers Portal.

Please visit the Commercial Bank website → Careers → Open Positions → Engineer – IT Security to submit your online application.

Important Notes

• Experience in banking or financial sector cybersecurity will be an added advantage.
• Professional cybersecurity certifications are highly desirable.
• Only shortlisted candidates will be contacted for further selection.
• Commercial Bank of Ceylon PLC is an equal opportunity employer committed to maintaining world-class information security standards.