Head - Security Engineering & Assets Security Unit at First Bank

Ref No: 1900003A
Location: Lagos
Organization: Technology and Services
Schedule: Regular
Job Type: Full-time

Description

• Security requirements: specify, allocate, and assign confidentiality, integrity, and availability requirements to development and acquisition organizations and assets
• Security architecture: Develop and maintain an enterprise security architecture
• Secure lifecycle: ensure that security requirements are adequately addressed throughout the development and acquisition lifecycles for all assets
• Certification and accreditation: perform certification and accreditation prior to releasing new systems and software to production
• Manages and assess the bank’s security measures, such as firewalls, anti-virus software and passwords, to identify any weak points that might make information systems vulnerable to attack.
• Coordinates and prioritize security coverage to ensure that strategically important data, such as commercial information or personal data, receives the highest levels of protection.
• Manages all activities that serve to provide appropriate access to  protect the customers information and that of all security solutions.
• Perform gap analysis based on the understanding of current-state and target-state of the Information Security architectures.
• Coordinates the selection, design, justification, implementation and operation of information security controls and management strategies in accordance with regulations.
• Ensures that projects are compliant with the banks Information Security architecture framework and secure development standards.
• Coordinate and provide leadership and oversight of information assurance, setting high level strategic and policies to ensure stakeholder’s confidence, that risk   to the integrity of information in storage and transit is managed pragmatically and in a cost-effective manner.
• Manage the overall Business Continuity Planning process and report results to the Information Security Management team.
• Coordinate the execution of vulnerability assessments processes, penetration tests and security audits.
• Coordinate the enforcement of Information Security standards and policies including the maintenance of security certifications e.g. the Payment Card Industry Data Security Solutions (PCIDSS).
• Coordinate regular security awareness workshops for all Information Security Operation’s employees to ensure consistently high levels of compliance with regulatory bodies.
• Create and maintain Information Security documents, comprising, policies, standards, baselines, guidelines and procedures.
• Establishes, plans, and administers the overall policies and goals for the information security operations department.
• Manage the deployment, monitoring, maintenance, development, upgrade, and support of all Information Security services.
• Develop standard operating procedures for Information Security best practices and service provision.

Qualifications
Education:

• Minimum Education: First Degree in Computer Science/Engineering, Higher Degrees
• At least three Relevant Professional Certifications as appropriate

Experience:

• Minimum experience - Ten (10) years relevant working experience and 5 years working experience at supervisory level.