IT Security Officer Job at Stanbic IBTC Bank

Stanbic IBTC Bank is a leading African banking group focused on emerging markets globally. It has been a mainstay of South Africa’s financial system for 150 years, and now spans 16 countries across the African continent.

Standard Bank is a firm believer in technical innovation, to help us guarantee exceptional client service and leading edge financial solutions. Our growing global success reflects our commitment to the latest solutions, the best people, and a uniquely flexible and vibrant working culture. To help us drive our success into the future, we are looking for resourceful individuals to join our dedicated team at our offices.

We are recruiting to fill the position below:

Job Title: IT Security Officer
Job ID: 24894
Location: Lagos Island, Lagos
Job Sector: Information Technology and Services
Job Details

• Group Information Technology: systems development, business analysis, architecture, project management, data warehousing, infrastructure, maintenance and production

Job Purpose

• To provide an operational IT Security support to ensure that the bank is not compromised in anyway. The operation support includes anti-virus, intrusion detection, key management as well the delivery of and content scanning of all internet mail incoming and outgoing.
• Ensuring that all incidents are responded to, actioned and resolved within the required MTTR. Also ensure that calls are escalated and communicated to the required support area and user.

Key Responsibilities/Accountabilities

• Configure, install and support all security software
• Responsible for administration of the firewall and monitoring of security tools & software with special focus on infrastructure and network security
• Testing of security software for new technologies
• Generating, loading and maintaining the life cycle of all encryption keys for the Bank
• Responding to and resolving all Firewall, ISA, Mail Marshal, Blackberry, OWA incidents
• Administration and monitoring of Intrusion detection & intrusion prevention tools for workstations and servers
• Testing of security software for new technologies
• Test and implement approval firewall rules
• Support of Firewall, ISA, Mail Marshal, Blackberry, OWA,E-Mail, Encryption Tools, Mail Marshal, AD, Equinox, Anti Virus
• Engagement:
  • Partner with relevant stakeholders to maintain and improve the security posture of Business and IT.
  • Develop appropriate measures to understand the effectiveness of securing the bank through the availability of systems.
  Service Delivery:
  • Perform monitoring via the Security Information and Event Management (SIEM) tool as well as from external sources (e.g. telephone or email).
  • Update the Case Management tools with evidence trails of all analysed incidents.
  • Document results of incidents.
  • Escalate and provide feedback on incidents as per Incident Handling Classification Standard and process.
  • Provide support to Lead Analyst and coordinate activities in support of Incident Containment.
  • Interact with the CSIRT team by assignment from Lead Analyst or Manager of Cyber Security Operations Centre.
  • Report on false positives and escalate those to the Lead Analyst for verification.
  • Undertake incident analysis, tracking, recording, and response.
  • Work with or assist other Cyber Security Incident Response Team (CSIRT) members in analysis activities.
  • Report new attack types or suspicious activity to the Lead Analyst.
  Mitigation of Risk:
  • Continuously report on incidents identified via the SIEM.
  • Spot patterns across a number of systems to provide advanced warning on new threats.
  • Have an in-depth knowledge of Stanbic IBTC’s policies, procedures, or overall IT environment. Adherence to all applicable Policies and Procedures is mandatory.
  Reporting:
  • Ad- hoc compilation and submission of M.I.S reports.
  • Security incidents reporting.
  Preferred Qualification and Experience
  • B.Sc. in any Science Courses
  • MCSE / CISA / CISM / CISSP etc would be beneficial
  • Working knowledge of relevant Operating Systems.
  • Demonstrate knowledge of standards associated with the role, e.g. ISO, CobiT, ITIL.
  • Understanding of incident management and case management technologies (ticketing systems).
  • Understanding of the CSOC and CSIRT objectives and requirements.
  • IT Security experience / Communication or Network experience will be beneficial
  • IT Security Awareness
  • Knowledge/Technical Skills/Expertise

    • Working knowledge of the IT and IT Security field including TCP/IP, HTTP, encryption, network access controls, intrusion detection and prevention systems.
    • IT Security penetration testing

    
    How to Apply
    Interested and qualified candidates should:
    Click here to apply
    Application Deadline  14th July, 2017.