IT Security Analyst at Stanbic IBTC

Description

To provide an operational IT Security support to ensure that the bank is not compromised in anyway.  The operation support includes anti-virus, intrusion detection, key management as well the delivery of and content scanning of all internet mail incoming and outgoing.

Ensuring that all incidents are responded to, actioned and resolved within the required MTTR. Also ensure that calls are escalated and communicated to the required support area and user.

It is imperative that the necessary housekeeping takes place on an hourly/ daily/weekly/monthly basis as per the job requirements.
Provide high level competency with regard to mainframe IT security systems

Key Responsibilities

Configure, install and support all security software
Responsible for administration of the firewall and monitoring of security tools & software including Active Directory, e-Pay, PayDirect, Equinox, Blackberry etc
Test and implement approval firewall rules
Support of Firewall, ISA, Mail Marshal, Blackberry, OWA,E-Mail, Encryption Tools, Mail Marshal, AD, Finacle, Anti Virus. SIEM, DAM, NAT tools
Testing of security software for new technologies
Generating, loading and maintaining the life cycle of all encryption keys for the Bank
Responding to and resolving  all Firewall, ISA, Mail Marshal, Blackberry, OWA incidents
Administration and monitoring of Intrusion detection & intrusion prevention tools for workstations and servers
Provide comprehensive administration procedures
Provide professional auditing and tracing capabilities.
Provide security monitoring and information gathering.
Provide 24-hour assistance to Production environment.
Suuport for Business in managing all IT operations related issues.

Key Performance Measures

Number of instances of non-compliance to policy and procedure
Number of awareness sessions held across the bank
Number of security reports to senior management and the Board.
IT Audit rating by Internal Audit, Routine Control, and external audit
Percentage of SLA met versus total number of incidents and work requests logged.
No service impact
Reduced number of incidents
Successful implementations of change request on the on Finacle, PayDirect , Firewalls, ISA, OWA ,MM
Meet deadlines
Meet SLA targets
Maintain a logically structured security database.
Ensure that there are no service disruptions due to access denial.
Ensure no service disruption due to maintenance of the security database.
Ensure the training of capable security administration staff.
Professional assistance to large projects in relation to security requirements.
Adequate knowledge of security principles and procedures.

Important Relationships

End users
Risk Management
Financial Crime Control Unit
LAN Administrators / Active Directory Team
Unix team
Firewall team
Software vendors
Auditors
Group IT Security
Infrastructure / Production / Application/ RIS Team