Main Duties: IT security operation and administration: Provide input to development of enterprise IT security policies, standards, best practices; monitor security profiles and report violation . Develop information security framework based on the ISO27001 standard that defines how people, technology, and process should be assembled to secure the environment and remain consistent with business objectives. Assist in the investigation of possible security exception to ensure information system security in applied across the enterprise. Technical implementation of PCI DSS requirements Implement process and methods for the purpose of the auditing and addressing on compliance issues to information security standards. Provide input in planning of security administration of smooth implementation of all IT projects . Systems and Network Hardening against Bank standards and CIS benchmark documents. Vulnerabilities assessment using the vulnerability management systems in the bank . Building security awareness program (IS awareness Trainer), and promote for security culture and practices among employees. Provide support for Security problems, security incident response and change management. Administrating security appliances at Jordan Ahli Bank (Cisco Firewalls, Cisco IPS, Fircepoint web gateway, Fortinet, McAfee MVM, Wireless IDS, Source fire SSL, Cisco ISE, Cisco ACS, RSA envision SIEM solution ) . Administrating Temenos SMS module . Ensure project milestones are achieved as per project plan in terms of time and budget. Risk and compliance management:
Identify any potential areas of complaince vulnerability and risk in order to implement corrective action plans for resolution of problematic issues. Assist in conduct of risk assessment on the risks that could seriously impact IT services across enterprise IT infrastructure against the ISO 27001 standards and recommend the appropiate controls and risk plans and programs to mitigate the risk . Monitor and identify any new technology risk threat and take pro-active measure to protect company's computing and networking environments. Participate in conduct of pnetration tsting to assess the vulnarabilities and weaknesses in the systems. Participate in the planning for the restoration of IT services to provide adequate backup and recovery mechanisms for the unexpected contingencies. Coordinate the internal and external audites and follow up the implementation of the AUdit recommendations with various IT sections. Monitor the performance of the risk and compaliance program and related activitiexs on a continuing basis in order to take appropriate steps to improve its effectiveness. Track and analyze performance and security risk measures, study and evaluate frequently reported problems to pro-actively take necessary actions to prevent them in the future. observe and participate in the evaluation of new technology to keep improving company's IT security infrastucture framework and proactively protect company against the new threat and risks.
IT Audit: Engage with external and internal auditor for compliance and audit programs.
section objectives
JAB IT Security Projects: PCI -DSS certification . ISO 27001 standard applying. Cobit5 standard applying. Changing Jordan Ahli Bank data center network devices. New Disaster recovery site building (new network and security devices). Implementing I storm Vulnerability assessments, Strom Agent FIM and SIEM solution and Air storm wireless IDS. MacAfee Vulnerability (new vulnerability scanner) tool. RSA Security Analytics SIEM solution (Implementing, configuration, systems integration, Reports tuning, Dashboards ) JAB new systems along with the new core banking implementation.( new interfaces and systems along with the new core banking system _ Temenos )
- Company industry:
- Banking
- Job role:
-
Information Technology
