Our client is a proprietary investment group of company. They currently have an opening for an experienced IT Security Specialist (Financial services). Job Overview
As an ideal candidate, you will have industry certifications such as CISSP / CISM / CRISC and have expert knowledge of Information Security and Risk Management Key Responsibilities
Provide leadership and support to the IT teams on the selection, design, justification, implementation and operation of technical information security controls to maintain the Confidentiality, Integrity, Availability of information systems.
Review existing technical environment controls, propose changes and manage changes to improve overall IT Security posture.
Embedding security into all stages of the software development life cycle / delivery methodologies.
Promote awareness of strategic initiatives, and encourage self-sustaining security practices and behaviours within delivery teams.
Perform technical project and supplier risk assessments
Ensure projects comply with the company’s information security policies
Act as the main point of contact for all risk assessments and remediation plans
Generate and provide scheduled Security & Risk Management reports to the GRC Director
Assist with regulatory compliance implementation and security best practices.
Undertake assurance assessments of Third Party suppliers
Provide expert technical support and guidance during incidents
Take ownership and responsibility for accomplishing objectives as set by the GRC Director
Demonstrate resilience and delivery focused under very demanding pressures and circumstances
Increases or Decreases in Reported Incidents.
Total Number of Securities.
Cost Per Incident (Direct cost, indirect cost and cost of lost opportunity).
Time to Resolve.
Regulatory Requirements when benchmarked to industry standards.
First-Time Fix Rate.
Bachelor’s degree in computer science or related field.
Three (3) to Six (6) years of relevant work experience with enterprise information security implementation.
Experience in information security or related field.
Experience with computer network penetration testing and techniques.
Experience in researching new or emerging technologies and processes that may be incorporated as solutions to reoccurring security concerns.
Security incident and event management skills.
Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
Very good conceptual and analytical thinking skills.
Good interpersonal and communication skills.