Senior Analyst - Database Security Management at First Bank

Job Identification: 106

Job Objective(s)

• Protection of the Banks databases from internal and external sources of exploits which can lead to information thieft or policy violations that could have a negative impect on the Bank. 
• The role will also be responsible for at an enterprise and Subsidaries level the undertaking of database vulnerability assessments; ensuring audit ability of databases; providing secure database baselines; providing security engineering design, implementation and test support; determining, analysing and decomposing security requirements; reviewing and monitoring security designs; assisting with audit activities related to PCI/security compliance; monitoring security controls in the database domain; automation, alerting and correlation with regards to database security events and alerts; creating, owning and promoting the security strategy for protecting databases and integrating it with the wider bank security strategy.
• This will also  include manageing and coordinating efforts that would include In-depth analysis of the Banks database security, Manage the Banks incidence response to database security incidence and manage the efforts of the Bank in the monitoring of database activities. 
• Fine tuning the Database Activity Monitoring, Data masking tools, data encryption tools and DLP

Duties & Responsibilities

• Coordinate the planning & design of enterprise database security architecture
• Design and implement Database security architecture and data sanitisation techniques for the Bank.
• Implement risk assessment program and controls across the banks database,
• Develop and implement database security projects and serve as project manager/lead.
• Translate business strategies into a well-define set of operating procedures
• Prepare reports on audit findings and make recommendations for correcting unsatisfactory conditions, improving operations and reducing the compliance exception
• Supervise the role of  junior Database security analysts on administering, analysing database security structures, interpreting and, and troubleshooting to ensure the continued security of the enterprise. Provides trouble resolution on complex problems and leads implementations for system and network security technologies.
• Coordinate the development of testing plans to ensure quality of database security implementation.
• Coordinates and prepares the reporting of database security events and incidents.
• Provides technical support to business and technology associates in risk assessments and implementation of appropriate information security procedures, standards and technologies.
• Represents major upgrades and reconfigurations in change control.
• Design & analyze mix of vendor services meeting business and information security requirements.
• Maintains relationship with key vendors.
• Determine and perform complex configuration changes to meet business and information security requirements.
• Perform capacity analysis.
• Recommend and implement capacity increases.
• Serve as the technical escalation for results of preventative maintenance routine on enterprise databases .
• Supervise preventative maintenance.
• Represents the unit in database security support in significant projects and performs the most complex operations and administration tasks.
• Respond to level 3 & 4 change and problem requests without supervision.
• Lead level 1 & 2 incident recoveries and root cause analysis.
• Coordinate program designed to ensure security of the banks database systems and information assets.
• Maintain systems to protect against unauthorized access, modification, or destruction Identifies, reports, and resolves security violations.
• Manage user’s access and permission control for various database and management systems.
• Coordinate the analyses, development & implementation process for improvement using security tools such as DAM. Assist with the implementation of classification and categorization schema of data.
• Support the full system engineering life-cycle including requirements analysis, design, development, testing and implementation, assessment, authorization and monitoring of the information systems such as Data loss Protection and other database applications.
• Manage the monitoring of database audit logs, Access Control List, password, and security assessment reports access on databases.
• Conduct risk assessment and provides documentation regarding product deficiencies, change or software issues.
• Provide and develop technical topics, lessons learned and training sessions for FirstBank end users.
• Maintaining the access control and permission for all databases and monitor the access and use of databases for likely breaches and threats.
• Support the requirements analysis, design, development, testing, and implementation for the data / content management system
• Maintain user access and permission control for various data management systems.
• Perform desktop support and troubleshooting for the various Databases.
• Conduct risk assessment and provides documentation regarding database issues.
• Create standards in Database Security processes, procedures and audit requirements
• Conduct security tool selection, pilot and implementation
• Perform other duties as may be assigned by the Unit Head, Infrastructure management and Head, Information Security Operations Department. .
• Comply with the principles and policies in the information security hand book
• Fine tuning the Database Activity Monitoring, Data masking tools, data encryption tools and DLP

Job Requirements
Education:

• Minimum Education:  First degree in Computer Science/Engineering, Systems Engineering or with strong Information Security component
• Database Security knowledge the following platforms - Oracle (8i, 9i, 10g, 11g), Informix (9, 10, 11), MS SQL Server (6.5, 7, 2000, 2005, 2008), DB2 (8, 9), Sybase (11, 15), Teradata. Certified IBM DB2 DBA, version 8.

Experience:

• Minimum experience: 3 years banking experience