IT Security Lead – DFCC Bank

Job Overview

DFCC Bank is looking for a skilled and experienced Lead – Information Systems Security professional to strengthen its Information Security division. The ideal candidate should possess strong expertise in vendor risk management, security audits, compliance processes, and cybersecurity frameworks within banking or FinTech environments.

Job Title

Lead – Information Systems Security

Company

DFCC Bank

Job Category

Information Technology & Cyber Security

Bullet Category List

• Information Security
• Cyber Security
• IT Risk Management
• Security Audits
• Banking Technology

Job Location

Colombo, Sri Lanka

Employment Type

Full Time

Industry

Banking & Financial Services

Job Responsibilities

• Conduct and manage third-party vendor security assessments
• Ensure compliance with organizational and regulatory security standards
• Lead onsite vendor security audits and monitor remediation processes
• Drive organization-wide information security awareness programs
• Ensure compliance with SWIFT CSP requirements
• Develop, review, and maintain information security playbooks and procedures
• Conduct periodic user access reviews to enforce security controls
• Support incident handling and operational security processes
• Strengthen employee security culture across the organization

Candidate Requirements

• Bachelor’s degree in Information Security, IT, Computer Science, BCS, or a related field
• 3–5 years of experience in Information Security
• Minimum 2 years of experience in banking or FinTech environments
• Hands-on expertise in vendor risk management and security audits
• Strong knowledge of risk management frameworks
• Professional certifications such as CC, ISO 27001 Lead Auditor/Implementer, or CIPSI
• Excellent analytical and problem-solving skills
• Strong stakeholder management capabilities
• Risk-driven mindset with attention to detail

Required Skills

• Information Security
• Cyber Security
• Vendor Risk Management
• Security Audits
• Compliance Management
• SWIFT CSP
• Risk Assessment
• Incident Handling
• Stakeholder Management
• Analytical Skills

Why Join DFCC Bank?

• Opportunity to work with one of Sri Lanka’s leading commercial banks
• Exposure to enterprise-level cybersecurity operations
• Professional and inclusive working environment
• Career growth opportunities in Information Security and Banking Technology
• Collaborative and innovation-driven workplace culture

How to Apply

📧 Send your updated CV to:

recruit@dfccbank.com