Regional Information Security Engineer

Job Description

Responsibilities Responsible for designing, deploying, and maintaining security solutions in the region to address the Bank’s security requirements. Assist to drive the Bank’s security transformation agenda including implementation of security strategy and technology solutions for the region. Ensure that the Bank’s data and infrastructure are protected by enabling appropriate security controls Design security architecture and develop a cybersecurity deployment plan such as Endpoint Detection and Response (EDR) implementation. Develop technical solutions to automate repeatable tasks for better efficiency and further product innovation Continuously assess cyberattack surface and exposure to protect the Bank’s sensitive information. Provide comprehensive security risk profile including issues and propositions for further system security enhancement. Keep up to date with evolving attack tactics, techniques and procedures and apply continuous improvement to security tools and processes Qualifications Minimum of 15 years’ experience in security related work including proven work experience as an Information Security Engineer, preferably with extensive experience in the financial services sector Strong knowledge in security solutions at various levels – application, infrastructure, network and data. Experience in building, maintaining and operating security tools including Endpoint Detection and Response (EDR) or Extended Detection and Response (XDR) tools. Hands on experience in various security systems such as firewalls, intrusion detection / prevention systems, anti-virus software, authentication systems, log management, content filtering, and web proxies. Good understanding of various security frameworks such as MITRE ATT&CK (Tactics, Techniques, and Procedures), OWASP, and NIST Cybersecurity Framework Professional certifications such as CISSP, CISA, and CISM Effective communication skills and stakeholder management skills Good understanding of cloud environment and up to date industry trend. Familiarity in scripting or automation is an advantage