Analyst, Vulnerability Management at First Bank

Duties & Responsibilities

• Manage regular reviews of Banks network devices to ensure that configurations meet best security practices.
• Manage vulnerability scanning of applications and information systems
• Manage payment card data discovery scans to ensure security of Card Holder data.
• Conduct internal and external Penetration tests on the Bank’s information systems and make recommendations to critical findings.
• Provide in-house information security consulting expertise to the Bank
• Manage continuous reviewing of technology (e.g. network, systems, etc.) security to ensure compliance and optimal performance.
• Identify solutions for security compliance, as well as determine and coordinate improvements.
• Manage the review of defined levels of tolerance and risk exposure with a focus on mitigating them.
• Manage and control established security protocols in the event of any failure or incident in the Organization.
• Lead technology risk management processes to identify, analyze, qualify, quantify, treat, accept, communicate and monitor risks related to information technology.
• Provide guidance and support during changes to existing systems and implementation of new systems.
• Drive situational awareness to all staff and other stakeholders based on risk identification.
• Assist in all security operations aimed at identifying cyber-attacks on the Bank
• Assist with development and implementation of enterprise security strategy and security.
• Assist with review of defined levels of tolerance and risk exposure with a focus on mitigating them.
• Promote a culture of adherence to security policies and practices.

Job Requirements
Education:

• Minimum Education: First Degree in Computer Science / Engineering, Higher Degrees / Professional Certificates.

Experience:

• Minimum experience - Working knowledge of PCI DSS
• Working knowledge of ISO 27001.
• Knowledge of the Security tools such as Qualys, Burp Suite, Pix AlertGood understanding of Best Practices Security architecture.
• Good knowledge of network protocols including UDP/TCP/IP
• Professional level knowledge of Access control lists, NAT, routing and switching
• Ability to review rule sets for firewalls.
• Good knowledge of firewalls, IDS and IPS.
• Good knowledge of network security and encryption models.

Key Competency Requirements:

Knowledge:

• Operating systems including windows and Unix
• Knowledge of Finacle banking application.
• Knowledge of Postilion and Postcard.
• Sound understanding of Cryptography and its application in electronic channels
• Good understanding of the ISO 27001, PCIDSS Frameworks
• Software development Lifecycle.
• Knowledge of E-business products.
• Business continuity and Disaster recovery
• Good knowledge of PCIDSS.
• Understanding of fraud management and monitoring systems.
• Knowledge of Application vulnerability assessment and ethical hacking.

Skill / Competencies:

• Excellent Interpersonal skills.
• Effective Communications skills (written and oral).
• Must be self- solution driven, proactive and have acceptable knowledge of the business environment.
• Adequate attention to details.
• Reasoning and analytical skills.
• Customer relationship management.
• Internal customer relationship Management.
• Good knowledge of credit Documentation.
• Excellent Presentation skill.
• People Management & Development skill.
• Enjoy networking and alliance building.