The candidate qualified for this job is to ensure that adequate security controls are in place on Bank systems for the protection of the integrity, availability, and confidentiality of information, promoting and supporting information security as an important part of the corporate culture and daily business operations. The qualified candidate for this job is to develop, evaluate, and manage the security of the systems over the enterprise. The candidate is to concentrate on management controls, operational controls, and technical controls. The candidate would also be enforcing security policies and procedures by the administration and monitoring of security profiles, reviewing security violation reports and investigating the possible security exceptions, updates, and maintaining document security controls

Main responsibilities:

- Creating, maintaining, and enforcing information security policies, and managing the security through effective planning and managing risks to Bank systems.
- Overseeing the enforcement of policies and procedures for the administration of the system security and user system access, based on the best practices of the industry standard
- Designing, implementing and supporting the primary security control products such as vulnerability management, security information management (SIEM), and protection of network and host-based intrusion
- Developing, evaluating, and managing the security of the system across the enterprise, with concentration areas including management controls, operational controls, and technical controls
- Developing and implementing security policies and procedures such as user log-on and authentication rules, security breach escalation procedures, security auditing procedures and use of firewalls and encryption routines
- Enforcing security policies and procedures by administering and monitoring the profiles of security, reviewing security violation reports and investigating the possible security exceptions, updates, and maintaining document security controls
- Evaluation of products and procedures to enhance the effectiveness of security
- Providing support directly to the business and IT staff for issues related to systems security
- Assisting the Director with the planning and program development
- Ensuring the integrity and confidentiality of the information in the corporate databases, workstations, servers, and other systems
- Ensuring the security of the internally transferred data
- Monitoring of VPNs, server logs, firewall logs, intrusion detection logs, and network traffic for unusual or suspicious activity
- Interpreting the activity and implementing plans for resolution
- Planning, designing, and implementing security systems and the corresponding or software, including firewalls, VPNs, intrusion detection systems, cryptography systems, biometrics, and anti-virus software
- Developing, managing, and executing comprehensive audits of the technical environment of the bank, including distributed, end-user, and vendor or third party systems
- Representing the Department as a liaison between system development task forces, and as a technical consultant on system development projects that are complex
- Recommending and deploying additional security products and tools, or enhancements to existing tools, for detecting network security measures violation
- Controlling the procedures of the user login and password management practices
- Conducting researches on emerging products, services, protocols, and standards in support of the efforts of security enhancement and development
- Performing special projects and the additional duties and responsibilities whenever required
- Adhering to the internal control policies and procedures, and maintain Sarbanes-Oxley compliance where applicable and when performing the responsibilities of the job

Requirements:

- A Bachelor’s Degree in Computer Science, Information systems, or any other related field
- A Professional Certification such as CISA, CISSP, or any equivalent certification
- A minimum of 10 years’ experience of security work and IT combined, and a broad exposure to infrastructure or network and multi-platform environments
- Knowledge of security issues, techniques, and implications of every existing computer platform
- Knowledge of the concepts of information systems, technologies, and controls, including familiarity with the distributed system environments, information systems security concepts, tools and techniques and project planning methodologies, and a sound knowledge of basic programming
- Experience in developing security solutions for complex assignments that range from medium to high
- Ability to work on multiple projects as a member of the team and leading the security components related to systems
- Ability to lead and coach more junior technical staff
- Experience with network and IS security components, including firewalls, intrusion detection systems, anti-virus software, data encryption, and other standard techniques and practices of industry
- Experience in Account Management, profile management, configuration management, logging and monitoring, and risk management
- An extensive technical expertise in administration of systems and security tools, with knowledge of the practices and procedures of the security
- A broad technical knowledge of network operating systems such as Unix, Linux, Active Directory, etc.
- A strong knowledge of IP, TCP or IP, and other network administration protocols, and including their vulnerabilities and solutions
- A sound knowledge of bank accounting, regulatory compliance issues, and analytical review procedures
- Knowledge of the applicable practices and laws relating to data protection and privacy
- Experience in conducting research on security issues and products whenever required
- Good analytical and problem solving skills
- An excellent interpersonal, written and oral skills in communication
- A high self-motivated and directed individual
- Good organizational skills and a strong attention to detail
- Ability to design and implement a security system audit and end user activity audit
- Ability to prioritize and execute tasks in a highly pressured environment
- Ability and experience working in a team-oriented and collaborative environment