CBS Security Specialist – CRDB Bank January 2026

CBS Security Specialist – CRDB Bank

Job Purpose

The CBS Security Specialist is responsible for protecting the bank’s Core Banking System (CBS) by ensuring confidentiality, integrity, and availability across all supporting environments. The role focuses on securing the CBS and its connected ecosystems, including payments, digital channels, and integrations, through strong security architecture, secure SDLC practices, continuous monitoring, compliance, and effective incident response.

The position plays a critical role in safeguarding mission-critical banking platforms by embedding security controls across application, data, integration, and infrastructure layers while supporting business continuity and regulatory compliance.

Key Responsibilities

• Define and maintain CBS security architecture patterns covering CBS modules, ESB/API gateways, batch jobs, and downstream systems
• Embed secure SDLC requirements into all CBS changes and enhancements
• Conduct threat modeling and security risk assessments for CBS modules, interfaces, and new banking products
• Implement and maintain hardening and configuration baselines for operating systems, databases, application servers, and CBS platforms
• Enforce database and data security controls, including encryption, key management, masking, auditing, and least-privilege access
• Implement and govern identity and access controls for CBS, including RBAC, segregation of duties, PAM, and periodic access reviews
• Coordinate CBS vulnerability scanning and patching, prioritize findings, and drive SLA-based remediation
• Develop CBS-specific SIEM monitoring use cases and security alerts
• Lead CBS-related incident response activities, including forensics, root-cause analysis, and lessons learned
• Review and approve CBS-related change requests and ensure security readiness before go-live
• Ensure CBS compliance with regulatory requirements, security standards, and audit expectations
• Validate CBS business continuity, disaster recovery, backups, failover, key recovery, and reconciliation controls
• Assess third-party and vendor risks related to CBS platforms and services
• Provide targeted security awareness and training for CBS operations, developers, and product owners
• Act as the primary cybersecurity subject matter expert for the Core Banking environment

Qualifications and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Security, Engineering, or a related field
• Professional certifications such as CISA, CCSP, CISM, CRISC, or CEH are an added advantage
• Minimum of 4 years’ experience in application or platform security within banking or financial services
• At least 3 years’ hands-on experience securing Core Banking Systems or equivalent mission-critical platforms
• Strong understanding of CBS architecture, including modules, EOD/BOD processes, GL posting flows, batch jobs, and common attack vectors
• Experience with secure integration patterns using APIs, ESB, microservices, authentication, authorization, tokenization, and TLS
• Strong knowledge of database security (Oracle, MSSQL), including encryption, auditing, access control, and secure configuration
• Familiarity with payment systems security such as SWIFT, ISO standards, card systems, and digital channel integrations
• Solid understanding of application security principles, OWASP Top 10, secure coding, code review, and security testing tools
• Experience with infrastructure security, OS hardening, virtualization, database hardening, and fine-grained auditing
• Strong skills in incident response, security monitoring, and risk-based decision making in high-availability banking environments

CRDB Bank Commitment

CRDB Bank is committed to sustainability and ESG principles and promotes an inclusive workplace. Applications from women and persons with disabilities are strongly encouraged.

CRDB Bank does not charge any fees during the recruitment or application process. Any request for payment should be disregarded.

Only shortlisted candidates will be contacted.

Click here to Apply