Requirements
We are seeking a dedicated and knowledgeable Cyber Security & IT Disaster Recovery Specialist (Resilience SME) to join our Resilience Factory Team. In this crucial role you will lead resilience assessment workshops with various technical and block teams within the Bank understanding and assessing the diverse IT landscapes technology stacks and security postures. You will evaluate existing threats identify risk exposures and propose strategic disaster recovery solutions to enhance efficiency scalability availability and security. This position requires collaboration with engineers technical experts architects and block teams with a strong foundation in system architecture platforms cloud technologies networking cybersecurity IT risk management and business resiliency.
Key Responsibilities
Resilience Assessment & Cybersecurity:
- Lead resilience assessment workshops with technical and block teams.
- Assess the security posture of existing systems and applications.
- Identify and evaluate current threats and risk exposures.
- Propose strategic disaster recovery solutions encompassing applications data infrastructure and security considerations.
Technical Expertise & Collaboration:
- Collaborate with engineers technical experts and architects to enhance system resilience.
- Provide technical guidance and mentorship during workshops.
- Interpret existing architecture and underlying components to validate and challenge recovery solutions.
- Work with Factory team members to lead security resilience workshops and document risk reports and IT assessment worksheets.
Cyber Resilience Strategy:
- Participate in threat action groups targeting cyber resiliencerelated threats.
- Mix quantitative and qualitative metrics to measure cyber resilience exposure.
- Set impact and risk tolerances monitor threshold levels and develop contingency plans for critical business services including thirdparty services.
Communication & Leadership:
- Communicate effectively with both technical and nontechnical stakeholders.
- Provide oversight and influence the Banks cyber assessment capabilities.
- Lead through influence and collaboration supporting constructive input and challenge.
Key Skills
- Strong understanding of enterprise applications servers storage systems networking databases and cloud technologies.
- Proficiency in evaluating existing systems and infrastructure to identify areas of threats.
- Experience in contributing to IT risk assessment workshops and evaluating existing controls.
- Ability to work effectively in a fastpaced collaborative environment.
- Knowledge of cyber resilience and security management frameworks such as ISO27001 ISO22301 ISO27005.
- Experience with cyber resilience strategies design engineering and architecture.
Qualifications
- A relevant degree in IT information security or equivalent experience.
- A minimum of 35 years of experience ranging from Medior to Senior level.
- Significant experience in cybersecurity threat management.
- Strong ability to communicate technical concepts to both technical and nontechnical audiences.
We are seeking a dedicated and knowledgeable Cyber Security & IT Disaster Recovery Specialist (Resilience SME) to join our Resilience Factory Team. In this crucial role, you will lead resilience assessment workshops with various technical and block teams within the Bank, understanding and assessing the diverse IT landscapes, technology stacks, and security postures. You will evaluate existing threats, identify risk exposures, and propose strategic disaster recovery solutions to enhance efficiency, scalability, availability, and security. This position requires collaboration with engineers, technical experts, architects, and block teams, with a strong foundation in system architecture, platforms, cloud technologies, networking, cybersecurity, IT risk management, and business resiliency. Key Responsibilities Resilience Assessment & Cybersecurity: Lead resilience assessment workshops with technical and block teams. Assess the security posture of existing systems and applications. Identify and evaluate current threats and risk exposures. Propose strategic disaster recovery solutions encompassing applications, data, infrastructure, and security considerations. Technical Expertise & Collaboration: Collaborate with engineers, technical experts, and architects to enhance system resilience. Provide technical guidance and mentorship during workshops. Interpret existing architecture and underlying components to validate and challenge recovery solutions. Work with Factory team members to lead security resilience workshops and document risk reports and IT assessment worksheets. Cyber Resilience Strategy: Participate in threat action groups targeting cyber resilience-related threats. Mix quantitative and qualitative metrics to measure cyber resilience exposure. Set impact and risk tolerances, monitor threshold levels, and develop contingency plans for critical business services, including third-party services. Communication & Leadership: Communicate effectively with both technical and non-technical stakeholders. Provide oversight and influence the Bank's cyber assessment capabilities. Lead through influence and collaboration, supporting constructive input and challenge. Key Skills Strong understanding of enterprise applications, servers, storage systems, networking, databases, and cloud technologies. Proficiency in evaluating existing systems and infrastructure to identify areas of threats. Experience in contributing to IT risk assessment workshops and evaluating existing controls. Ability to work effectively in a fast-paced, collaborative environment. Knowledge of cyber resilience and security management frameworks, such as ISO27001, ISO22301, ISO27005. Experience with cyber resilience strategies, design, engineering, and architecture. Qualifications A relevant degree in IT, information security, or equivalent experience. A minimum of 3-5 years of experience, ranging from Medior to Senior level. Significant experience in cybersecurity threat management. Strong ability to communicate technical concepts to both technical and non-technical audiences.