IT Risk Specialist (Deputy Manager / Assistant Manager Grade) | Merchant Bank of Sri Lanka & Finance PLC (MBSL)

About Merchant Bank of Sri Lanka & Finance PLC (MBSL)

Merchant Bank of Sri Lanka & Finance PLC (MBSL), a subsidiary of the Bank of Ceylon, is a leading financial institution committed to delivering innovative financial solutions while upholding the highest standards of corporate governance and regulatory compliance. MBSL is seeking a highly motivated and experienced Information Security Risk Specialist to strengthen its Information Security and Risk Management function. The successful candidate will play a key role in safeguarding organisational information assets, managing security risks, ensuring regulatory compliance, and supporting business continuity initiatives.

Grade

Deputy Manager / Assistant Manager Grade

Qualifications & Experience

• Bachelor’s Degree in Information Technology, Computer Science, Information Security, Cyber Security, or a related discipline from a recognized university
• Minimum 3–5 years’ experience in Information Security, IT Risk Management, Cyber Security, IT Governance, IT Audit, or a related field
• Experience in relevant professional standards will be an added advantage
• Hands-on experience in ISMS implementation, IT risk assessments, security monitoring, compliance reviews, and Business Continuity Management (BCM)
• Strong analytical, problem-solving, report-writing, and presentation skills, with the ability to recommend practical risk mitigation measures
• Advanced proficiency in MS Excel, including data analysis and reporting

Key Responsibilities

• Manage and monitor Information Security risks across the organisation
• Oversee Privileged Access Management (PAM) and Risk Assessment & Risk Treatment (RART) processes
• Conduct security risk assessments and recommend mitigation strategies to address identified vulnerabilities
• Support the implementation, maintenance, and continuous improvement of the Information Security Management System (ISMS)
• Review the confidentiality, integrity, and availability of information assets and IT infrastructure
• Support Business Continuity Planning (BCP) initiatives and monitor key security controls, including Active Directory, encryption, and information classification
• Monitor physical access controls, biometric authentication systems, and environmental security measures
• Review security incidents, logs, and events, and recommend corrective actions and control improvements
• Review IT and Information Security policies, procedures, and standards to ensure compliance and effectiveness

How to Apply

Apply online via the MBSL careers application form, or email your CV to careers.mbsl@mbslbank.com.

Deadline: 23rd September 2026

Note: An attractive remuneration package and career progression opportunities await the right candidate. Only shortlisted candidates will be contacted. Selection will be strictly based on merit; any form of canvassing or attempt to influence the recruitment process will result in disqualification.

{“@context”:”https://schema.org/”,”@type”:”JobPosting”,”title”:”IT Risk Specialist (Deputy Manager / Assistant Manager Grade)”,”description”:”MBSL is hiring an IT Risk Specialist to manage Information Security risks, ISMS implementation, and Business Continuity Planning. Bachelor’s degree in IT/Cyber Security, minimum 3-5 years experience required.”,”datePosted”:”2026-09-11″,”validThrough”:”2026-09-23T23:59:00+05:30″,”employmentType”:”FULL_TIME”,”hiringOrganization”:{“@type”:”Organization”,”name”:”Merchant Bank of Sri Lanka & Finance PLC (MBSL)”,”sameAs”:”https://www.mbslbank.com”},”jobLocation”:{“@type”:”Place”,”address”:{“@type”:”PostalAddress”,”addressCountry”:”LK”}},”directApply”:false}