Information Security Officer at FNB South Africa

Job description

Business Area: IT

Purpose

As an Information Security Officer for FNB you will be accountable to oversee and coordinate information security across the bank to identify and establish information security initiatives and standards throughout the organisation. You will also be responsible for planning, directing and coordinating the bank’s information security policies by setting procedures and guidelines that will ensure all information systems are functional and secure.

Responsibilities

In this role you will be tasked to, amongst other things:

• Research and investigate measures that address data security risks and potential losses for reporting purposes
• Deliver services that meet regulatory specifications
• Work with internal and external auditors to document and confirm that all security administrative duties are properly performed as well as demonstrate overall compliance
• Develop and/or maintain appropriate Segregation of Duties within and across applications and follow-up on detected security issues and implement solutions to reduce security risks
• Monitor access to all systems and maintain access control profiles on computer network and systems
• Track documentation of access authorisations to all resources
• Install, modify, enhance and maintain data system security software
• Assist in the research, development, communication, maintaining and working with the operational units on the enforcement of IT security architecture, policies, procedures, solutions and standards
• Meet with business owners to analyse, document and define requirements associated with new development or maintenance and enhancements to existing security roles and permissions
• Review completed roles/permissions with users to ensure requirements are fully met
• Oversee incident response planning as well as the investigation of security breaches and assist with disciplinary and legal matters associated with such breaches as necessary
• Based on participating in development and implementation of the appropriate and effective controls to mitigate identified threats and risks

Competencies

• Support improved data security awareness and education including on-call availability
• Responsible for staying abreast of the latest industry security practices and technologies and to develop skill if not displaying skills
• Precise, systematic and rule-oriented in gathering, reviewing and evaluating data from a variety of perspectives; includes the ability to work with precision
• The ability to integrate information from a variety of sources, discern complex underlying relationships and predict patterns for future growth
• Set up ongoing processes and systems to define, collect and evaluate information needed to manage activities in relation to clearly defined objectives, time-lines and performance standards; includes the ability to identify and implement appropriate measures and benchmarks
• Prioritises safety, security, health, environmental and quality requirements before commercial considerations and is proactive in flagging and managing potential risks, however small

Requirements

• 8 years or more experience in the information security environment
• Understand the information security assessment and auditing procedures
• Knowledge of enterprise scale network and host based IDS structures
• Knowledge of enterprise scale firewall architectures
• Understand the e-commerce security application
• Degree or Diploma in Computer Science with CISM/CISSP Certification