Senior Analyst, Application and Database Security at First Bank

DUTIES & RESPONSIBILITITES

• Participate in the creation of enterprise security policies, standards, baselines, guidelines & procedures.
• Work with Information Control and Internal Audit departments in ensuring the implementation of the ICAFAS rules in the core banking, E-Banking and other relevant applications.
• Responsible for the day to day operations of the in-place database security solutions.
• Identify, investigate & resolve security breaches detected by installed security solutions.
• Perform security project analysis.
• Lead the implementation of new database security solutions.
• Participate in the design & execution of vulnerability assessments, penetration tests and security audits.
• Keep abreast of new/revised or improved security solutions, processes and development of new threat and attack vectors.
• Perform the deployment, integration and configuration of new database security solutions.
• Perform enhancement of existing database security solutions in accordance with standard best operating procedures.
• Maintain up-to-date baselines for the secure configuration & operation of all in-place database security & monitoring devices.
• Maintain operational configurations of all in-place database security and monitoring solutions as per established baselines.
• Technical Security Assessment and Reviews across (such as Static Code Review, Penetration Testing and Systems Hardening) all the bank’s and third parties’ application.
• Establish a security program for the SDLC; capture the current application architecture; lead the overall application review process; identify application vulnerabilities; propose architecture changes at procedural and technology levels and also ensure the integration of application security using OWASP into the SDLC.
• Architect and deploy secured configurations for all databases.
• Apply tested security patches and updates to databases/web servers
• Managing/Optimisation the Web Application Firewall, API Security Gateway, Data Masking tool, Load Balancer and Database Activity Monitoring.
• Implement all database security settings in line with approved policies.
• Perform scheduled and adhoc security and compliance reporting.
• Support Security Monitoring team to define and maintain security awareness program.
• Perform other duties as may be assigned by the Head, Information Security Operations Department.
• Comply with the principles and policies in the information security hand book.

JOB REQUIREMENT

Education:

• Minimum Education: First degree in Computer Science/Engineering, Physical Science, Systems Engineering or with strong Information Security component.

Experience:

• Minimum experience – 3 years banking experience