Responsibilities:
· Monitor / prevent/detect/investigate cyber threats proactively, identify areas of concern and develop action plans to address them
· Cybersecurity support and awareness to the IT teams
· Vulnerability management
· Follow up of the remediation
· Manage operational issues with security from logging the issue at the respective supplier to implementation of the required fixes
· Collaborate closely with the business expert and IT teams to guarantee that the solution is in line with security policies
· Conduct scans of assets to find vulnerabilities
· Evaluate security solutions using industry-standard analysis criteria
· Write documentation and KPI definition: Processes, procedures, playbooks
· Be involved in the conceptualization of new projects, acting as a gatekeeper for the integrity of the digital architecture and its connection to the site infrastructure
· Organize and evaluate Penetration Testing activities to ensure the security of the digital platforms
· Technical testing activities, compliance-related topics (PCI DSS, ISO 27001, IT Audit)
Requirements:
· Bachelor’s Degree in Computer Science/Engineering or equivalent experience.
· Minimum 5 years’ experience in a similar position and 5 years’ experience in security (Banking is a plus)
· Experience in operational risk and confidentiality and MCOS (maintenance in operational and security condition)
· Hands-on and able to dig into technical issues and drive for solutions and sense of urgency
· Able to assess the criticality and impact of risks and issues in the above domains, and formulate concrete recommendations
· Ability to work autonomously and take decisions, Ability to explain complex technical issues in a way that non-technical people may understand
· Fast learner, Self-driven, highly motivated, have can-do attitude, able to work with minimum supervision.
· Problem-solving attitude, Reactivity, proactivity & discipline
· Strong Team spirit and Good communication in English
· Scanning the systems for vulnerabilities in software and hardware (Qualys), Knowledge of IT governance, operations, and Microsoft Technologies
· Knowledge in security, understanding PKI, TLS 2.0, symmetric keys, asymmetric keys, basic attacks on websites, the links of those attacks to specific weak points, and the countermeasures to be put in place.
· Virtual technologies: VMWare ESXi, vCenter, Linux Operating Systems