Manage the cyber security management resources and ensure proper segregation of functions and capacity management to support different business and technology initiatives/requirements
Lead The information security analysis function to ensure adequate definition and implementation of security controls requirements within the secure software development and acquisition lifecycle processes
Lead the information systems security management function to ensure defining and deploying the required security baselines/configurations and controls across all technology layers (infrastructure, network, platforms,etc)
Lead and manage offensive security exercises and ensure proper implementation of the different offensive security models and testing (such as: Red teaming, purple teaming, etc)
Collaborate and work closely with the SOC team to ensure adequate implementation of controls and addressing gaps resulting from adversary simulation exercise, and other offensive security testing
Establish the agile security framework that ensures adequate integration of security within the DevOps processes applied within any agile development lifecycle within the organization to ensure DevSecOps concepts are in place and fully integrated within the respective processes and frameworks
Work closely with information security team to review and validate outcomes and outstanding issues resulting from penetration tests, etc to ensure that cross collaboration within different security teams is in place to tune controls as needed to protect against identified issues/threats
Provide guidance and support on secure coding practices, secure design principles, and security risk mitigation
Ensure proper implementation of the bank's security policies, standards, and procedures to ensure compliance with industry regulations and standards, and the confidentiality, integrity, and availability of an organization's information systems and data
Evaluate and recommend security tools and technologies within the CI/CD pipeline
Collaborating with both development and operations teams to create a seamless flow of work and maintain an agile workflow
Oversee the static and dynamic code scanning process throughout SSDLC and SSALC processes
Provide support to SOC Incident Response team when needed, and guidance and recommendations to IT and Security teams on improving security measures
Participate in the development of the Security Operations Center strategy in line and Group strategy to ensure vertical and horizontal integration with other interfacing initiatives and departments across the bank
Participate in the development of the Security Operations Center policies, processes and procedures to ensure the fulfilment of all relevant procedural/legislative requirements
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.