Senior IT Security Operations Officer

Sundus Recruitment and Outsourcing Services, Abu Dhabi

Abu Dhabi

AED 200,000 - 400,000

Job description

Location: Abu Dhabi

Role Purpose

Manage and maintain security devices, tools/products implemented at the bank for day-to-day tasks.
Implement security policies, protocols, and procedures.
Regularly monitor security logs and events for IT security devices to review security events and alerts and proactively detect actual or potential attacks to the bank network.
Provide administrative, organizational, and technical support that assists the Manager – IT Security Operations to accomplish department tasks and act as the backup in the Manager’s absence.
Incident response: Respond to attack attempts and contain incidents.
Follow the security hardening baselines/guidelines and generate reports as required.
On-call availability for critical alert(s)/issue(s) reported by Command Center after working hours, weekends, and public holidays, and proper escalation to Manager - IT Security Operations.
Ensure compliance with published policies and procedures defined by ITD Governance, GISD, etc., by performing according to what has been documented.
Ensure accurate and timely status reporting and other related documentation to management.
Ensure satisfactory department audit with no high-risk finding on department. Any finding to be resolved within agreed time (with Audit and Management).

Key Accountabilities Of The Role
IT Security Operations Unit (20%)

Assist IT Security Operations Manager in formulating tasks list for IT Security Operations Unit in a manner that tasks are aligned with overall IT Division goals.
Prepare management dashboards and reporting.
Attend all team meetings, one-to-one meetings to foster a high level of communication culture.
Timely response to emails, tasks assigned, and effective follow-up with various stakeholders.
Ensure the team provides excellent support, leading to user satisfaction.

IT Security and Device Management (30%)

Manage, maintain, and monitor security devices, security tools, and products implemented at the bank.
Ensure security of all bank public services hosted in the DMZ.
Security configuration of perimeter devices according to best practices and vendor guidelines.
Manage security device configuration change(s) as per bank standard change management process.
Perform security device health checks as per approved checklist(s).
Update security devices with the latest stable software and signature releases.
Troubleshoot technical issues related to security.
Participate in POCs in coordination with the Security Projects delivery team to evaluate and provide feedback for the selection of the best suitable security solution for bank IT security requirements.

Security Events Monitoring, Incident Response & Support (10%)

Ensure that required logs from security devices and tools are configured to forward to SIEM.
24/7 stay on-call for Command Center, SOC and initiate response in case of any security incident.
Provide Level 2 & 3 support for any security incident reported by Command Center/SOC and escalate as per escalation procedures/guidelines.

Global Expansion (10%)

Fulfill the IT security requirements for international expansion as conducted by the bank.
Ensure availability of security services for international branches and provide BAU security operations support.

Information Security (10%)

Maintain information security related to the bank throughout the period of employment.
Report any potential or actual risks or incidents affecting the security of information to the ITD Service Desk and to your Line Manager as soon as possible.

Documentation / Process Ownership (10%)

Take ownership, maintain, and update documented processes and/or documentation related to job function.
Coordinate with the owner of documents about required changes or improvements when processes or documentation are shared.
Co-operate with team members in a cohesive and professional manner and maintain good attendance habits while adhering to the reporting hierarchy in all matters.
Adhere to working hours which might require working for extended hours depending on job nature and task assigned.

Specialist Skills / Technical Knowledge, Technical Competencies Required for this role:

Graduate in any field related to Information Technology / Computer Science.
Certification: Microsoft Azure Security/Architecture, Firewall, IPS, Email Gateways, WAF, and/or other security certifications.
Good knowledge of IT systems configuration and log analysis.
Strong understanding of general security and networking concepts in corporate network environments.
Strong understanding of well-known security technologies.
Demonstrates a range of effective technical problem-solving techniques.
Strong understanding of Cloud Security Posture Management, ability to review and take actions.
Good understanding of DevSecOps methodologies.
Good understanding of Cloud native security including security in distributed microservices architecture.
Knowledge of information security systems, methodologies, and best practices.
Possess team building skills and must efficiently work with various stakeholders.

Previous Experience

Total Number of Years: Minimum 10 years in IT Environment (Network Security & Cloud Security).
Minimum 8 years’ experience in similar banking or IT organizations.
Bachelor’s degree in computer science, information systems, business administration, related field, or equivalent work experience.