Cloud and DC Infrastructure Managed Services Lead

The Senior Security Architect (SSEA)
reports to the Head of Architecture but is also accountable to the DeliveryHead & Lead in the business/functional domain (aka Matrix Manager) that isbeing served. The SSEA is expected to possess deep technical expertise,potential leadership qualities & be solution oriented.

The below competencies are
specific and targeted towards Customer Facing Mobile Apps and its associatedeco-system, processes, and integrated components.

Domain Competencies:

• At
  least 3-5 years of technology experience & working knowledge of Banking Mobile Apps, their unique security features & API integration
  
  • 3-5
    yearsexperience in securing IOS & Android Mobile Apps and its associated ecosystem.
    
    • Must
      understand the nitty-gritties of IOS & Android native controls as well as Third Party components that have the potential to make the mobile app more secure.
      
      • Extensive
        knowledge and experience with designing and proposing solutions that
        combat Digital Fraud that typically takes place via Banking Mobile
        Apps
        
        • Deep
          knowledge of how to implement key controls for Mobile Apps especially on Native Apps and APIs ( both Ingress & Egress)
          
          • Deep
            knowledge and/or Experience with Threat Modeling Banking Mobile Apps & itintegrated ecosystem.
            
            • Deep
              knowledge and/or experience with prescribing balanced Security Requirements for Banking Mobile Apps & itintegrated ecosystem.
              
              • Deep
                understanding of global and regional regulatory requirements related to
                banking and financial services (e.g., PCI-DSS).
                
                • Experience
                  in implementing security solutions to ensure that Banking Mobile Apps comply with regulatory requirements and/or have minimal risks prior product releases.
                  
                  • Knowledge
                    of API Security Standards implementation for secure
                    interoperability between different banking systems
                    
                    • Deep
                      knowledge and experience with designing & proposing People, Process & Technology controls to ensure secure build, deployment and distribution (to App Stores) of Banking Mobile Apps
                      
                      • Ability
                        to assess and integrate third-party technology solutions into Banking Mobile Apps from a security perspective.
                        
                        • Understanding
                          of Retail Banking Mobile App offerings, products, and processes
                          
                          • Familiarity
                            with emerging banking technologies and trends (e.g., blockchain, digital currencies, e-checks, ML)
                            
                            • Knowledge
                              & experience integrating industry best practice Fraud Management solutions for Banking Mobile Apps
                              

                              
                              
                              

                              Technical Competencies:
                              
                              

                              • Deep understanding of conducting
                                Data Classification & Asset Valuation activities
                                
                                
                              • Knowledge of conducting Threat
                                Modeling using frameworks of choice
                                
                                
                              • Deep understanding of Application
                                Security (OWASP Top 10 or similar), API Security & Mobile Security(Mobile OWASP Top 10)
                                
                                
                              • Deep understanding of
                                Infrastructure Security including but not limited to Containers, VirtualMachines, Operating Systems, Databases, and Interfaces such as payment switches,APIs, event-treaming systems, file transfer systems.
                                
                                
                              • Experience with end-end to
                                security requirements and solutioning via collaboration with peer Architects,tech leads and associated stakeholders.
                                
                                
                              • Experience in Development of
                                standards, patterns, and best practices for reuse. Promotion of designadherence to bank policies, standards, architectural principles, and guidelines
                                
                                
                              • Must be able to create security
                                solution-oriented presentations for Senior Technical and/or Business Leaders
                                
                                
                              • Must be able to tailor language
                                and communication based on the audience
                                
                                
                                
                                Requirements

                                Responsibilities:
                                
                                

                                • Conduct Data Classification, Asset
                                  Valuation, Threat Modeling, Security Requirements & Patterns within realisticallyagreed timelines
                                  
                                  
                                • Influence squads/teams to
                                  implement secure design to ensure risk reduction of the product prior to release& in the long run.
                                  
                                  
                                • Deliver secure solutions within
                                  realistically agreed timelines.
                                  
                                  
                                • Optimize Shift-Left processes
                                  within the team.
                                  
                                  
                                • Ensure seamless governance within
                                  realistically agreed timelines.
                                  
                                  
                                • Run education, socialization, and
                                  awareness workshops with squad/tribe members and/or peers.
                                  
                                  
                                • Do specialized technical or soft
                                  skill learning courses and/or achieve certifications.
                                  
                                  
                                • Excel at Collaboration, Ownership,
                                  Drive & Enterprising (CODE) values of Emirates NBD
                                  
                                  
                                • Coach & mentor associate
                                  architects to improve the quality of the team and the product.
                                  
                                  
                                • Introduce & implement
                                  innovative ways of working to deliver value within squads (Preferred)
                                  
                                  
                                • Engage in Stretch
                                  Assignments/Goldilocks Tasks to contribute value to the organization (Preferred)
                                  
                                  
                                  
                                  ","