Cybersecurity Professional

Develop and enforce security plans and standards to ensure network and system security best practices are executed and implemented.

Key Responsibilities:

• Design detailed implementation plans based on approved IT security systems and infrastructure architecture.
• Formulate, review, and maintain IT security policies, technical standards, internal procedures, and guidelines related to securing the information processing environment, facilities, and third-party services/providers.
• Support CPSD and SQRD teams as a security subject matter expert for IT security and network infrastructure architecture.
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.
• Evaluate cost-effective solutions and prepare business cases for IT security projects.
• Manage testing of technical controls related to network security and monitor its implementation.
• Define and document network security tool/device standard configuration parameters. Ensure that network security controls are securely configured and functions effectively and efficiently.
• Perform regular security configuration reviews, ensuring efficacy of controls, and utilizing them optimally.
• Monitor and assist ITG administrators in resolving timely problems with security devices/systems.
• Review and/or evaluate vendor performance as part of the VPRC process.
• Review installation and changes to security infrastructure, i.e., firewalls, VPNs, routers, IDS scanning technologies, servers, and network devices, assessing their impact on security posture and operations.
• Manage the implementation of baseline system security standards for various legacy systems.
• Collaborate and coordinate with other ISD departments to provide holistic ISD services to internal customers.
• Establish disaster recovery strategies for network security tools implemented and ensure they are regularly tested for effectiveness.
• Stay up-to-date with the latest security technology and trends, vulnerabilities, and threats.
• Work proactively with the SAID Head to implement programs for the continuous improvement of the Bank's information security plans and strategies.
• Perform other information security governance, risk, and compliance-related duties and responsibilities as directed by the SAID Head.

Qualifications and Skills:

• Graduate degree in Computer Science or Information Security, or a related technical field of expertise.
• Extensive knowledge and understanding of LAN/WAN networking topologies and protocols, cryptographic methods and schemes, operating systems (Windows, Linux, Unix), database systems, wireless technologies, cloud technologies, and security tools and technologies in various information security domains.
• Certification may include SANS GIAC, CISSP, CISM, CompTIA Security+, or equivalent.
• At least 3+ years' experience in designing, implementing, and maintaining security solutions.
• Analytical and risk identification skills to analyze various information security-related risk situations and develop recommendations on the best course of action.
• Scripting and programming - computer programming and scripting skills are an advantage.
• Strong written and oral communication skills to write technical reports on assessments and communicate potential security weaknesses.
• Awareness of security best practices and knowledge of common and emerging security threats.
• Self-starter, result-orientated disposition for corrective action to drive remediation and reduce risk exposure.
• Good teamwork and collaboration skills: good team players with the ability to lead security initiatives.
• Good project management skills to lead and manage accomplishments of assigned tasks/projects within predetermined timeframes.
• Effective communication skills: to articulate and explain complex security topics in simple language and easy-to-understand concepts.