Information Security Engineer
Burgan Bank
Total years of experience :12 years, 8 Months
Role:
• Prompt response to user requests related to access control; and periodical review of such access and associated privileges on various application systems
• Day to day access control administration and management of banking systems creation and testing of test cases for systems and appliances
• Auditing and reviewing audit logs of banking applications
• Monitoring the IT infrastructure, policy violations and security applications for security events and unauthorized actions and reporting these adequately
• Operating and managing the Information Security Infrastructure and also ensuring its availability
• Monitoring and verifying the user management reports and identify any actions that deviates from standard procedures
• Define, review and enforce information security policies and procedures for access control management and administration
• Performing periodic technology and physical security risk assessments on the network, systems and applications
• Coordinate with IT to develop, implement and test disaster or emergency recovery procedures for information systems
• Generate and escalate periodic reports for senior management
• Participate in various cross-functional committees and team meetings for multiple purposes to achieve optimal cooperation and to ensure seamless quality
Key Achievements:
• Performed a review of existing procedures and updated when appropriate for greater security
• Provided User Access based on user requests for access to any and all applications (45 at present)
• Trouble shot access problems for applications and provided 24/7 application system support as necessary for the diverse need of the Bank
• Trained new staff to ensure proper completion of access requests and problem resolution
• Conducted security audit of applications, identified several vulnerabilities and recommended corrective actions
• Reviewed user accounts and access on a monthly basis to ensure regulatory and corporate compliance
• Process re-engineered business protocols to meet the high demand of a changing business environment
• Created, modified and disabled user accounts based on authorized forms
• Reduced security deficiencies by 98% over the previous calendar year
• Planned and implemented meaningful risk-based and performance-based metrics tools for the Information Security Team
• Coordinated all special projects and supporting activities (e.g., annual security review of key financial applications)
• Evaluated security on various systems and recommend changes to improve network integrity and prevent excessive access and potential risk
• Conducted information owner identification, user re-certification, and group clean-up projects which insured compliance with corporate and audit policies.
• Responsible for managing various functions which involves administration and troubleshooting of Local Area Network (LAN) consisting of 1800+ workstations, Banking Software and running various network operating systems, including, Windows 2008, Windows 2003, Windows Xp & Windows 7
• Sound at providing all level support, up to date configuration and routine maintenance
• Accountable for performing activities involving mounting, optimizing and troubleshooting, active directory, replication and performance
• Providing support through Dame Ware
• Managing troubleshooting activities & resolving Incidents / problems within agreed service levels and quality metrics
• Escalating unresolved issues to 3rd line support staff or external vendors in a timely fashion and providing updates to both End user & Supervisor
• Guiding & advising clients on how to utilize IT more efficiently and effectively
• Working in coordination with outside suppliers to ensure service is delivered within agreed Service Levels
• Interfacing with other IT Support functions and monitoring various operations level agreements
• Responsible for analysis of incident trends also deft at assisting Problem Manager with problem identification and resolution
Bachelor of computer application
Diploma in Computer Hardware Maintenance & Network
Diploma in Networking