Information Security Analyst (GRC)

Information Security Analyst (GRC) – Bank of Ceylon

Job Overview

Bank of Ceylon (BOC), Sri Lanka’s leading state-owned commercial bank, is inviting applications for the position of Information Security Analyst – Governance, Risk & Compliance (GRC) (Contract Basis). This role plays a key part in strengthening the bank’s cybersecurity governance framework by ensuring compliance with international standards, managing information security risks, and supporting audit and regulatory requirements.

Position Details

Job Title: Information Security Analyst – GRC (Governance, Risk & Compliance)
Company: Bank of Ceylon
Location: Colombo District, Sri Lanka
Employment Type: Contract Basis
Category: Banking & Insurance, IT & Software, Security, Government Jobs, Management
Application: Apply via Email (Button available at bottom of post)

Company Overview

Bank of Ceylon is the largest banking institution in Sri Lanka with an island-wide branch network and international operations. The bank is globally recognized among top banking brands and continues to enhance its cybersecurity resilience, governance frameworks, and regulatory compliance posture to support secure banking operations.

Qualifications & Experience

• Citizen of Sri Lanka
• Bachelor’s Degree in Information Security, Cyber Security, Computer Science, Information Technology or related field from a UGC-recognized university
• Minimum 1–2 years of experience in Information Security, Governance, Risk Management, Compliance (GRC), or related fields
• Strong understanding of cybersecurity governance and risk management frameworks
• Knowledge of ISO 27001, PCI-DSS, or other security compliance standards
• Experience in security audits, policy development, or risk assessments will be an advantage
• Professional certifications such as CISSP, CISM, CRISC, or equivalent will be an added advantage

Key Responsibilities

• Support development, implementation, and maintenance of information security policies and procedures
• Assist in ensuring compliance with regulatory, legal, and industry standards
• Conduct risk assessments and support security governance activities
• Participate in internal and external security audits and compliance reviews
• Monitor and report security risks, gaps, and control effectiveness
• Support remediation activities for identified security issues
• Maintain documentation related to information security governance
• Collaborate with IT, Risk, Compliance, and Audit teams
• Contribute to security awareness and compliance improvement initiatives
• Assist in preparing governance and risk reports for management review

Required Skills

• Strong knowledge of information security governance and risk management principles
• Understanding of ISO 27001 and information security compliance frameworks
• Analytical and problem-solving abilities
• Strong documentation and reporting skills
• Ability to work with cross-functional teams
• Good communication and stakeholder management skills
• Attention to detail and structured thinking
• Ability to manage multiple compliance tasks in a regulated environment

Salary & Benefits

• Competitive contract-based remuneration package based on experience and qualifications
• Opportunity to work in a leading national banking institution
• Exposure to enterprise-level governance, risk, and compliance frameworks
• Professional development in cybersecurity and regulatory compliance domain
• Structured and professional working environment

How to Apply

Interested candidates should send their updated Curriculum Vitae along with qualifications, experience details, and professional certifications via email to:

Email: careers@boc.lk

Please mention “Information Security Analyst – GRC” in the subject line of the email.

Applications should be addressed to:
Deputy General Manager (Human Resource Operations)
Human Resource Division
Bank of Ceylon
Colombo 01

Important Notes

• Applications must be submitted on or before the closing date mentioned in the official advertisement
• Only shortlisted candidates will be contacted for further selection stages
• Applicants must meet all required qualifications at the time of application closing
• Incomplete or late applications will not be considered
• The Bank reserves the right to shortlist, postpone, or cancel the recruitment process without prior notice
• Canvassing in any form will lead to disqualification
• All applications will be treated with strict confidentiality according to bank policies