IT Security Operations Officer

This job has now expired please search on the home page to find live IT Jobs.

Responsibilities:

Provide support to plan, coordinate, and implement the organisation’s information security strategy;

Oversee and facilitate the design, development and implementation of solutions to security requirements;

Implement security standards, procedures, and guidelines for multiple platforms and diverse system environments based on approved security policies;

Provide support to facilitate and coordinate current security infrastructure and define future programmes, design and implementation of security related to IT systems;

Perform information security assessments (at network, OS and application level) and/or interpret information security results;

Able to identify security risks, threats and vulnerabilities of networks, systems, applications, and new technology initiatives;

Able to liaise directly and work closely with third party security service providers;

Provide security support in the development, testing and operation of firewalls, intrusion detection systems, enterprise anti-virus, and software deployment tools;

Provide first response and remediation to control security risks and threats in IT environments;

Investigate and recommend corrective actions for security incidents to the organisation and other project stakeholders;

Conduct security architecture analysis to evaluate and mitigate issues;

Implement policies and develop technical procedures for securing the system infrastructure and applications;

Develop, implement, enforce, and communicate security policies and/or plans for data, software applications, hardware, and telecommunications;

Identify the installation, modification or replacement of hardware or software components and any configuration change(s) that affects security;

Assess the impact on the business unit caused by theft, destruction, alteration or denial of access to information and report to senior management;

Stay abreast with information security incidents, trends and participate actively in the information security community;

Submit any reports and/or manage any projects and activities as may be directed by the Group Head of Security;

Propose and attend training as requested by the Group Head of Security;

Travel and carry out IT Security related duties at other offices overseas;

Ensure a high quality/standard of work and service throughput;

Perform any other duties that may be assigned from time to time;

Expected skills and experience:

IT related degree in a relevant security field or equivalent combination of education and experience;

At least 3 years' experience in network, server, data and/or application security in multiple operation system environments preferably within a financial institution;

Working experience in other regulated sectors is considered an asset;

Preferably be in possession of industry accredited security certifications such as CISSP, SSCP, CISA, CEH.

Working experience with networking protocols and understanding of security related technologies including encryption, IPSec, PKI, VPNs, firewalls, proxy services, DNS and access-control-lists;

Working experience with Internet, web, application and network security techniques;

Working experience with relevant operating system security (Windows, Linux, etc.);

Experience and/or knowledge with leading firewall, network scanning, intrusion detection, and authentication technologies;

Knowledge of approaches, practices, tools and techniques for contingency and disaster recovery operations, and the ability to develop and execute contingency and disaster recovery plans;

Able to establish and maintain excellent working relationships/partnerships with the software development, infrastructure support and service desk throughout the Information Technology organisation, as well as business units and customers;

Strong work ethic, excellent writing, communication and presentation skills as well as good use of discretion and judgement;

Strong analytical and problem solving skills to troubleshoot and resolve security issues;

Able to work under limited supervision and able to meet deadlines;