I. Job Overview: 
The Senior Officer, Information Security Asset Management is to ensure the confidentiality, integrity, and availability of a bank’s information assets by establishing and maintaining a comprehensive inventory, assessing their risks, and implementing appropriate security controls.

II. Job Description:

1. Discovering and maintaining an accurate, up-to-date inventory of all information assets includes
   hardware (servers, endpoints, network devices, IoT), software (applications, operating systems,
   licenses), data (databases, sensitive files, intellectual property), cloud resources, and even physical
   documents if they contain critical information.
2. Tracking asset locations, ownership, and current status.
3. Tracking the cybersecurity infrastructure budget and expense in monthly basic and regularly report
   to management.
4. Collaborating with risk management and vulnerability management teams to assess risks associated
   with each asset.
5. Collaborating with procurement and cybersecurity infrastructure for hardware, software and
   subscription asset renewal.
6. Identifying vulnerabilities (e.g., unpatched software, misconfigurations, end-of-life systems) and
   prioritizing remediation based on asset criticality.
7. Enforcing security policies and procedures related to asset use, storage, and disposal.
8. Managing assets from acquisition (ensuring security by design) through deployment, ongoing use,
   maintenance, and secure decommissioning/disposal.
9. Preparing for and supporting internal and external security audits.
10. Providing accurate asset information to aid in incident response and recovery efforts (knowing
    what was affected and its criticality).
11. Generating reports on asset inventory, security posture, compliance status, and risks to management
    and other stakeholders.
12. Communicating asset security policies and best practices to employees

III. Requirement or Qualifications:
1. Bachelor’s degree in computer science, Information Technology, or a related field.
2. 2+ years of experience in information security, compliance, or risk management.
3. Strong understanding of information security principles, concepts, and best practice