Information Security & ICT Manager
FutureBank
Total des années d'expérience :23 years, 1 Mois
• Established Information Security Management System (ISMS) in the Bank
• As a project Manager for 35 + Major IS & IT projects and several other small projects.
• Managed 2 diverse teams effectively.
• Integrated IT Infrastructure for increased availability and monitoring through the Security Operation Center (SOC).
• Designed and managing active hot DR Site with real-time replication and performing business continuity cut over tests on periodic basis.
• Successful in maintaining multiple compliance and regulatory standards.
• Instrumental in overseeing the IS/ICT operation with no instance of major breakdown and being circumspection during planning of IS/ICT strategies.
Information Security Responsibilities
o Accountable for implementing information security policies and procedures as well as developing metrics and mechanisms to measure Security Operations Center (SOC) activities.
o Designing and managing information security office; creating and maintaining the security architecture with technology platforms like IPS, DLP, Encryption, SIEM, content filtering, etc.
o Overseeing incident management activities, conducting firewall rule analysis and continuously monitoring applications, databases and systems.
o Identifying potential, successful and unsuccessful intrusion attempts through review and analysis of security data.
o Managing vulnerability assessments/penetration testing activities, application vulnerability mitigation strategy and the application contingency plan.
o Evaluating the information system’s environment and defenses to identify improvement and efficiency opportunities.
o Monitoring multiple regulatory compliance standards with consistent validation and proper implementation of information security policies, procedures and technology standards.
o Consistently maintaining the bank’s ISO/IEC 27001 compliance status Since 2008 by organizing and managing the maintenance and implementation of the bank's annual compliance process.
o Performing regular network security assessments to aid in the annual qualification of the bank’s risk analysis; also conducting in-depth forensic evaluations as well as surprise audits to evaluate ISMS effectiveness.
o Preparing and presenting the ISMS effectiveness matrix to the management committee, as well as organizing security awareness training for the bank staff. Managing all IT security and ICT project of the bank.
o Redesigning the IT operational process in accordance with ISMS principles.
Infrastructure Responsibilities
o Designing, implementing, operating, managing and integrating enterprise IT systems and infrastructure.
o Guiding and supporting team members on the overall infrastructure architecture.
o Managing and monitoring IT infrastructure and networks of the bank while supervising and directing staff.
o Managing, coordinating and prioritizing multiple projects to ensure its compliance with budget, schedules/timelines and company strategy.
o Managing administration and support of servers across a multi-platform environment in five different sites.
o Directing and managing interoperability of information processing environments and data communications infrastructure for purpose of meeting current and strategic long-range information processing needs of the bank.
o Serving as an integral consultant for the designing and implementation of infrastructure and network projects as per ISMS principles across the bank.
o Efficiently working within the department to learn their specific IT requirements; also redesigning the infrastructure and network to meet banking, ISMS and central bank requirements.
o Redesigning ICT for business continuity readiness as well as conducting detailed studies and monitoring of traffic shaping, QoS and bandwidth usage to ensure the seamless connectivity with the remote locations and other networks.
o Designing and implementing ELV systems for The Future Bank new head office based on the ISMS requirements.
Constantly evaluating the information systems environment and defenses in order to identify opportunities for improvement and efficiency.
Monitoring multiple regulatory compliance standards with consistent validation and proper implementation of information security policies, procedures and technology standards.
Successfully maintained the last six year banks’ ISO/IEC 27001:2005 compliance status by organizing, managing the maintenance and implementation of the bank's annual compliance process.
Performing regular network security assessments in order to aid in the annual qualification of the banks’ risk analysis.
Performing regular in-depth forensic evaluations.
Conducting surprise audits for evaluating the ISMS effectiveness.
Preparing and presenting the ISMS effectiveness matrix to the management committee. Organizing the security awareness training to the bank staffs.
Re-designed the IT operational process for being in line with the ISMS principles.
Management of all IT Security and ICT project of the bank.
Infrastructure Responsibilities
Designed and implemented near Tier 4 Datacenter for the bank.
Design, implement, operate, manage, and integrate enterprise IT systems and infrastructure for business requirements.
Define and maintain technology and integration models.
Provide the expertise and guidance to peers, leadership and associates on the overall infrastructure architecture.
Management and monitoring of IT infrastructure and networks of the bank.
Manages, coordinates and prioritizes multiple projects to ensure they are within budget, meet schedules/timelines and align with company strategy.
Provides daily supervision and direction to staff.
Manage administration and support of servers across a multi-platform environment in 5 different sites. Direct and manage interoperability of information processing environments and data communications infrastructure for purpose of meeting current and strategic long-range information processing needs of the bank.
Served as an integral consultant for the designing and implementation of Infrastructure, Network projects based on ISMS principles across the bank.
Work efficiently with departments to learn their specific IT requirements and Re-Design the infrastructure and Network to meet the banking, ISMS and Central Bank requirements.
Re Designed the ICT for Business Continuity readiness.
Conducting detailed studies and monitoring of traffic shaping, QoS, bandwidth usage to ensure the seamless connectivity with the remote locations and other networks.
Designed and implemented ELV systems for the Future Bank new Head office based on the ISMS requirements.
Managing and monitoring of IP telephony system, call billing system, dealing room telephony to meet the banking requirements.
Maintaining a strong relation with the vendors, Service providers, Consultants for the IT requirements of the bank.
Coordinating with vendors for the infrastructure requirements, projects, and responsible for issuing the RFP’s / RFQ’s.
Successfully handled the Infrastructure and ISMS projects of Arowana Consulting; major projects are as follows:
• EITC - Du Telecom in Dubai for IT Infrastructure Roll-out Project
• DUBAL - Dubai Aluminum Company Limited, SLA Definition project
• Helpdesk Re-Design Project for the DUBAL - Dubai Aluminum Company Limited
Recruited to manage LAN/WAN, installation, configuration and support of various banking application software’s like Misys Trade Innovation for Trade Finance, City Dealer for treasury Department, , Cadman for Card Services Department, SWIFT for banking trade and finance and Sigcap for online signature capturing and retrieval.
Responsible for technical implementation and support of SWIFT SwiftNet software in bank.
Supported 1600+ users across multiple business units, including the trading floors and the branches.
Effectively planning secure messaging architecture including deployment of PGP mechanism.
Hardening of operating system and preparing documents for the same.
Accountable for maintaining necessary documentation for External, IT and Security audits
Ensure implementation of new projects with proper documentation as per security and quality standards.
Installing, configuring and servicing of servers, pc’s and network printers using TCP/IP protocol.
Remotely supporting users with the help of remote support tools such as pcanywhere.
WNG Global Services
Monitor and manage servers (Lotus Notes Domino Servers) that are located over 40 sites across the world.
Mail Administration of over 20000 users; create email policies, security policies.
Administration of all BA email servers, which includes, creation of new email accounts, Deletion of accounts, granting the external email facility, creation of Web mail account, Name change, Server change, Certifier change, dead mail detector, server mail quota management, user mail quota management, handling calls, solving kite queries and solving email Queries.
Responding to users request users requests problems and suggestions
Backup servers and restore databases from a backup procedure.
Installing configuring and administrating various airline software’s
Overseeing various department operations in managing day-to-day activities
Preparing schedules for calls, preventive maintenance and ensuring compliance
Accountable for successfully reviewing the security architecture and mechanisms and recommending changes to the structure.
Installing configuring and servicing of servers (HP, IBM) and branded computers.
Configuring, administrating and maintaining different application servers.
Other Responsibilities handled in the Team
Shift In charge in the absence of Team Leader.
Discussing work related issues with Team Assistant in UK.
Generation of Monthly and Weekly reports as and when required.
Preparing the Count sheets, which is been used to monitor the work.
Generating MIS reports for the team.
Preparing various reports to monitor the team performance.
Generating systems to reduce the error percentage of the team.
Assigning presentation topics to the individual staff for the knowledge of the team.
Nominating staff for various Developmental training’s in the Company.