This position involves assisting in the development and implementation of security policies, monitoring security threats, conducting risk assessments, and ensuring compliance with regulatory standards. The ideal candidate will work closely with IT teams to enforce security controls, mitigate cyber threats, and support incident response efforts.
Key Responsibilities:
- Assist in developing, implementing, and maintaining security policies, standards, and best practices in compliance with industry regulations (e.g., ISO 27001, NIST, GDPR, etc.).
- Monitor security alerts, conduct incident investigations, and support incident response efforts to mitigate threats and vulnerabilities.
- Conduct security risk assessments and provide recommendations for risk mitigation.
- Support internal and external audits related to IT security, compliance, and risk management.
- Collaborate with IT teams to ensure secure network configurations, firewall policies, and endpoint security.
- Participate in vulnerability management and penetration testing activities to identify and remediate security weaknesses.
- Assist in user awareness training programs on cybersecurity threats, phishing, and secure practices.
- Maintain documentation related to security incidents, risk assessments, and compliance reports.
- Stay updated with emerging cyber threats, security technologies, and regulatory changes affecting the banking sector.
Qualifications and Skills:
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field.
- 2-5 years of experience in information security, cybersecurity, or IT security, preferably in a banking or financial environment.
- Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls.
- Knowledge of security tools including SIEM, IDS/IPS, firewalls, and endpoint protection solutions.
- Understanding of regulatory requirements such as GDPR, and local banking security regulations.
- Experience with security risk assessments and incident response.
- Basic understanding of cryptographic technologies, identity and access management (IAM), and data protection methods.
- Strong analytical, problem-solving, and communication skills.
- Relevant certifications such as CompTIA Security+, CEH, CISA, or CISSP (Associate) are a plus.
Preferred Attributes:
- Experience working in a financial institution or regulated industry.
- Familiarity with cloud security principles and technologies.
- Ability to work independently and collaboratively in a fast-paced environment.