IT Security Manager

Job Summary

Experience

10 years in IT, IS, Security or related field

Education / Qualifications

Accreditation / Licensing

• CISP/CISA highly preferred
• Bachelor’s degree, with a technical major, such as engineering or computer science.

IT Tech Knowledge

Knowledge in infrastructure and application security standards, practices and tooling.

Application Security (DevOps in Projects)

• Ensure security requirements are embedded in all projects from the onset of any project and during the initial design phase and throughout the lifecycle of the project.
• Provide further technical security related guidance as required during the build and testing stages of the projects.
• Provide technical security input as required by the security policy development team.
• Implement security design of complex application and technology architectures.
• Manage technical design/review activities with various segments within the Security team
• Maintenance of systems and procedures to safeguard internal information systems and databases.
• Mapping Policy requirements to detailed technical implementation requirements for IT Stakeholders
• Software and application controls - implement, and maintain controls necessary to protect software and applications in accordance with security requirements (operating systems, applications, database management systems, web-based PCI applications, COTS; maintenance)

Generic & Specific Skills

• Good communication skills
• Accuracy and attention to detail
• Analytical Thinking
• Required Technical expertise
• Project Management

The Information Technology Security Manager ensures that the risk to the organization’s information posed by a variety of cyber threats (cyber-attacks; theft or corruption from within; etc.) is minimized. The IT Security Manager ensures that when cyber-attacks occur or data are stolen or compromised, these incidents are dealt with promptly and effectively and the chance of that incident recurring is minimized.

Domain

Basic Banking knowledge in Banking applications and functional knowledge in existing IT applications