Provide users at all levels and in all operationalenvironments access to and use of the information they need
Protecting and maintaining the integrity, quality, andavailability of information.
Provide timely and complete Situational Awarenessinformation
Provide clear, well integrated and enforceable operationalpolicies
Define standard data and information suitable to support therequired level of situation awareness
Defining, implementing, and enforcing the acceptable usepolicy
Proper assessment of the current operations occurring withinthe Banks network and infrastructure
Assess potential breakdowns, weak areas or vulnerabilitiesthat can be exploited to maximum effect in crippling the banks system andcommunicate contingency preparedness and readiness status to management.
Monitoring of unusual events or occurrences within the Cybersecuritynetwork.
Implement processes and solutions to ensure the banksflexibility to approach possible threats and mitigate them before they can besuccessful.
Determine information security events monitored should beescalated to incidents and follow all applicable incident response andreporting processes and procedures.
Responsible for tuning and filtering of events andinformation, creating custom views and content using all available toolsfollowing an approved methodology and with approval and concurrence frommanagement.
Notify the banks and other stakeholders of significantchanges in the security threat against the Customer networks in a timely mannerand in writing via established reporting methods.
Coordinate with appropriate organizations regarding possiblesecurity incidents. Conduct intra-office research to evaluate events asnecessary, maintain the current list of coordination points of contact.
Produce reports identifying significant or suspicioussecurity events to appropriate parties. Include latest security threatinformation and tie back to specific intrusion sets of nation state actors whenpossible.
Review and evaluate network modifications and recommendsecurity monitoring policy updates.
Establish procedures for handling each security eventdetected.
Minimum Education : First Degree in computer science / Engineering
Minimum experience 10 year working knowledge inInformation Technology / Information Security.
Higher Degrees / Professional Certificates Working knowledge of PCI DSS Working knowledge of ISO 27001
Information Security Standards, security architecture andpractices.
Good knowledge of network security and encryption models