CYBER SECURITY SPECIALIST – BancABC 38 views

Purpose of the job
To identify and monitor cyber security threats, potential cyber security risks and recommend closure of identified gaps or weaknesses.

Focus Areas

CYBER SECURITY RISK ASSESSMENT

• Research on potential cyber risks and threats (internal and external), local and international and submits a report to the Technology Security and Governance manager.
• Decides on the suitable tools to perform cyber security assessments.
• Carries out weekly cyber security risk assessments in line with guidelines (such as penetration tests, vulnerability assessments)
• Reviews and analyses internal audit, fraud and loss, incident reports, establishes trends and submits a report with recommendations to the Technology Security and Governance Manager

TECHNOLOGY SERVICES CYBER SECURITY ENVIRONMENT REVIEW

• Develops and updates cyber security plans for software systems, networks, date centres, and hardware and submits to the Technology Security and Governance manager for approval.
• Research best ways to secure company-wide Technology Services infrastructure against threats and risks
• Inspects firewalls (at least 5) and checks protection of network infrastructures (a least 40) and recommends corrective action.
• Conducts quality assurance on software and infrastructure for security vulnerabilities and risks.
• Monitors software and infrastructure for internal and external intrusions, attacks and hacks and recommends corrective action
• Closes off security vulnerabilities in the case of an attack by liaising with internal Technology Services team
• Identifies cyber attackers, report to Technology Security and Governance Manager
• Participates in the investigation of cyber-attacks reported cases with internal processes and legal enforcement agents

MONITORING TECHNOLOGY SERVICES CONTROL SYSTEMS

• Assesses Business Continuity Plans and Disaster Recovery Plans and makes appropriate recommendations.
• Checks adherence to the process of backing up Data and subsequent restoration and DRP testing of DRPs.
• Conducts training on Cyber Security

Qualifications and Work Experience

• Information Technology, Computer Science Degree or Equivalent Qualifications.
• 2 years’ experience or more working in Cyber Security Environment.
• Security certification e.g., CCNA, CISM/CISSP/CEH

Skills and Competencies:
• Excellent communication, personal, and governance skills.
• Excellent time management skills
• Brilliant conflict resolution, analytical, and decision-making skills are vital to the position.
• Technical aptitude
• Risk identification and management
• Data management and analysis

Job Related Knowledge
• Critical Thinking
• Knowledge of information security policies, control and networking protocols.
• Knowledge of security across various platforms
• Industry Knowledge – Knowledge of the organization’s industry group, trends, directions,
major issues, regulatory considerations, and trendsetters.