IT Risk Officer – State Mortgage & Investment Bank

IT Risk Officer – State Mortgage & Investment Bank (SMIB)

The State Mortgage & Investment Bank (SMIB), Sri Lanka’s premier housing bank, is inviting applications from qualified and experienced professionals for the position of IT Risk Officer. This role is ideal for candidates with strong expertise in IT risk management, information security, and banking technology controls.

🏦 About State Mortgage & Investment Bank (SMIB)

State Mortgage & Investment Bank (SMIB) is a state-owned financial institution committed to delivering secure, innovative, and customer-centric banking services while supporting Sri Lanka’s national housing and investment development goals.

📌 Job Title

IT Risk Officer

📍 Job Location

Sri Lanka (SMIB – Head Office / Assigned Location)

🕒 Employment Type

Full-Time | Permanent

🗂 Job Category

Banking Jobs Sri Lanka | IT Risk Management Jobs | Information Security Jobs

📝 Job Description

The IT Risk Officer – SMIB will be responsible for ensuring compliance with regulatory IT security standards, evaluating IT system risks, supporting audits, and strengthening the Bank’s overall information security and risk management framework.

🔑 Key Responsibilities
• Ensure adherence to CBSL Baseline Security Standard Guidelines without exceptions
• Review and validate information security risk awareness across the Bank
• Evaluate adequacy and effectiveness of IT systems, infrastructure, controls, policies, and procedures
• Conduct pre- and post-implementation reviews of IT systems in line with the Bank’s risk appetite
• Work closely with IT and Audit teams on IT security initiatives
• Identify IT system risks and prepare IT audit reports with recommendations
• Coordinate with HR to address knowledge gaps through information security training programs
• Review and follow up on penetration testing, vulnerability assessments, and external security incidents
• Participate in the annual IT Business Continuity Plan (BCP) drill
• Perform sample testing of IT risk controls in critical systems and processes
• Ensure effective functioning of IT security incident management systems
• Develop, monitor, and report IT security-related KPIs
• Review IT security policies and escalate system implementation risks when required

🎓 Qualifications
• Bachelor’s Degree in Information Technology, Computer Science, or Information Systems Management from a UGC-recognized university
• Professional IT security certification such as:
• CISA / CISM / CISSP / OSCP / OSCE / GIAC / ISO 27001 Lead Auditor or Implementer

 Experience
• Minimum 04 years of experience in:
• Banking or Financial Institutions
• IT Risk Advisory or Assurance
• Hands-on experience in information security, with exposure to network or application security
• Strong communication and interpersonal skills

 Salary & Remuneration
• Salary Scale: Rs. 113,040 – 150,640 per month
• Bank-approved allowances including:
• Cost of Living Allowance
• Rent Allowance
• 10% Allowance
• Total gross monthly salary: Approximately Rs. 218,000

 Age Limit
• Not more than 40 years
• (Age limit does not apply to candidates currently employed in the state sector)

📋 Selection Method
• Selection will be made through an interview in accordance with SMIB recruitment policies

 Closing Date

 11th February 2026

 How to Apply

Interested and qualified candidates should email:
• Curriculum Vitae (CV)
• Copies of educational and professional certificates
• Contact details of two non-related professional referees

 Email: careers@smib.lk

 Applications will be treated as confidential. Any form of canvassing will result in disqualification.

 The decision of the Board of Directors will be final.

 Employer

State Mortgage & Investment Bank (SMIB)

Sri Lanka

 Keywords
• IT Risk Officer SMIB
• State Mortgage & Investment Bank Vacancies 2026
• IT Risk Management Jobs Sri Lanka
• Banking IT Security Jobs Sri Lanka
• SMIB IT Officer Vacancies