IT Security Clerk at Al Baraka Bank South Africa

CORE PURPOSE OF THE JOB

• To fulfil the bank’s obligations in terms of Information Security as highlighted by internal/external audit as well as regulators in line with corporate governance. To monitor information security systems and event logs, investigation of events, research security solutions, assist in policy and procedure development, monitoring of security controls, facilitation of security assessments and advisory services related to organisational systems and projects.

MAIN FUNCTIONS OF THE JOB
Incident Prevention and Response / Security Monitoring:

•  Review of System/Application Security Logs & SOC-SIEM Reports for critical and supplementary systems.
•  Reporting of incidents and events that may warrant further investigation or action.
•  Follow up with relevant staff to ensure that remediation steps and actions have been timeouslyundertaken to mitigate risks.
•  Liaising with the relevant staff/service providers in respect of security incidents/events and ensuring that Risk Event Forms are completed.
•  Assess change requests for security infrastructure such as firewalls, routers, switches.
•  Conduct random inspections on security environment including desktops, laptops, servers, appliances, access points, etc. and providing a report on findings to the IT Security committee.
•  Provide IT Management (weekly & monthly), IT Security Committee (quarterly), IT Steering
• Committee (Bi-Monthly) and EXCO (Monthly) with information security statistics and reports related to SOC-SIEM logs and other system events reviewed, observations and recommendations.

Security Organisation & Infrastructure

•  Assist in documenting the Information Security Organisation relevant to ABL’s environment.
•  Research industry solutions and frameworks that may be used to enhance existing documentation and environment.
•  Security Administration including granting of privileges, provision of access to selected systems, control of system-based profiles including manual password resetting where automated functionality does not exist.
•  Conducting access reviews across all systems by communicating to all Department/Branch heads to ensure adequacy of permissions and access for staff.

Risk & Audit Assessment:

•  Facilitate internal/external reviews of the security environment at least once a year.
•  Assist with assessment of internal / external Audit security observations with supporting details of corrective actions, mitigating factors and preventative measures as appropriate.
•  Ensure status updates and progress of risk and audit issues for IT Management review on a monthly basis with onward submission to relevant committees upon acceptance by IT Management.

Policies & Procedures:

•  Assist in documenting and enhancing ABL information security standards, procedures and guidelines.
•  Communicate and publish relevant documentation for employee access.
•  Conduct independent reviews of policies and procedures on an annual basis using internal and/or external consultants as need

Continuity:

•  Assist in ensuring the security component of BC/DR plans are reviewed and updated frequently (at least once per annum).
•  Participate in BC/DR tests to ensure compliance with security processes.

Training and Awareness:

•  Co-ordinate training and awareness programs for staff at an organisational- wide level through E-Learning tools, E-Mail / Teams Communications, Staff Presentations and publishing of security posters.
•  Report security incidents, risk issues and general security concerns together with recommendations to IT
• Management and IT Committees.

Participation in Forums

•  Attend external Cyber Security meetings as a representative of the bank.
•  Attend IT Security & IT Steering committee meetings in respect of Security related matters.
•  Participate in approved public forums related to Cyber Security ensuring confidentiality and privacy of

corporate information.
QUALIFICATIONS

•  IT Diploma or equivalent IT qualification (N+, A+, Information systems, Informatics) required.
•  MCSE qualification (or studying towards) would be preferred.
•  Cisco Certified Network Associate (CCNA) qualifications (or studying towards) would be advantageous.
•  IT Security certification (or studying towards) required.
•  Auditing qualifications (or studying towards) would be advantageous.
•  Ethical Hacking Certification (or studying towards) recommended.

PREFERRED EXPERIENCE

•  2-3 years relevant experience in IT, Information Security, Auditing or related field.
•  2-3 years in a similar administrative role.
•  Demonstrated experience in related field.
•  Good understanding of business environment is highly regarded.
•  2-3 years of experience in Systems & Network Security operational environment would be advantageous.
•  1+ years of experience working with Cloud-based security environments would be advantageous.

KNOWLEDGE

•  Information Security and Auditing
•  Information Technology
•  Cloud-based technologies would be advantageous.