Job Title : Security Solution EngineerROLE PURPOSE :
Plan, design, manage and technical execution / delivery of the Bank's IT security solutions. Ensure
effectiveness of the controls in the IT infrastructure and systems to safeguard the Bank's IT
environment from internal and external security threats in maintaining confidentiality, integrity and
availability of information assets in the Bank.
INTERCHANGEABLE/FEEDER JOBS:
Application development and support/ project managers/ RSFG/ CSD teams or other line depts. with security
infrastructure knowledge.
PRINCIPAL ACCOUNTABILITIES :
• Manage the development of a well-formulated IT security architecture model, governance and standards based on risk assessment, IT and business directions and strategies to support the Bank's desired outcomes by applying architecture principles to drive measurable results in mitigating security risk and in safeguarding the Bank's IT environment from internal and external security threats, and using of Key Performance and Risk Indicators (KP&RIs) and effectiveness metrics to improve IT security processes.
• Responsible for continuous maintenance, monitoring and updates of the IT security architecture model, governance, policies, standards and processes. This includes anticipating growth to ensure scalability, assessing the value of enhancement emanating from benchmarks, observations or other industry best practices and incorporate the changes, if required.
• Ensure that the implementation of IT solutions align to the Bank's to the IT and business directions, strategies and optimisation of IT investments and compliance with IT policies, guidelines and procedures.
• Administer research and environmental scanning of emerging internal and external threats, technology trends and directions in mitigating IT security risks, and perform evaluation by working collaboratively across IT department and functions to improve the IT security infrastructure and services in the Bank in order to maintain confidentiality, integrity and availability of information assets in the Bank.
• Build and maintain strategic relationship/networking and collaborations with external IT security expert and other IT organisations in order to benchmark and improve the Bank's IT security infrastructure service delivery to the stakeholders.
â–ª Provide IT security advisory services on IT solution architecture and design proposals to ensure solution meets the IT security requirements as to safeguard the Bank's IT infrastructure and systems
â–ª Provide IT Threat Model for newly developed / implemented infrastructure to ensure that any potential IT threats are designed, tracked, alerted and monitored by the Security Operations Centre
â–ª Manage the lifecycle of IT security infrastructure and its related system solutions technology refresh with minimal impact to business operations and in compliance with the technology architecture design, standards and principles.
CRITICAL SUCCESS FACTORS :
â–ª Ability to keep abreast of cybersecurity threats and understand the business impacts and recommend mitigation plans to address the cybersecurity risks.
• Response management processes and recovery plans for detecting, identifying, analysing and reporting of
cybersecurity-related events to ensure timely identification of threats and implementation of the
proactive and corrective actions.
CHALLENGES
• Ability to ensure cybersecurity risks are addressed in the adoption of new technology (e.g. Cloud Services, BYOD)
• To balance the implementation of new business solutions with the needs to protect the Bank's information assets
and to educate business users on cybersecurity control awareness.
