Summary:
Ability to lead, plan and implement security setup. This requires an understanding of active directory structure and groups, role based security, knowledge of various OS system environments (Mainframe, Windows, Unix, Oracle) and some knowledge of scripting tools.
Job Duties:
- Ensures that requests conform to the documented processes
- Maintain the process of provisioning, managing and de-provisioning users across multiple directories
- Maintains user accounts in external secondary banking systems
- Ensures that security requests have proper (system owner) approval
- Manage and communicate all security issues related to business system administrators. This includes collaborating with functional and technical owners on incident management, problem management, escalation management and resource management
- This role will be responsible for understanding the AMG policies regarding page and/or access restrictions based on functional groups for multiple systems
- Manage the testing and migration of security objects from the non-production environments to the production environment
- In addition, this role will include playing a key part in security implementation to several international divisions
- Provide system support and maintenance (i.e., purging of obsolete security objects, test accounts and general security housekeeping) as needed
Skills and Qualifications:
- Experience with IIS, Microsoft security protocol and operations, Microsoft Exchange, Microsoft administrative tools, Group Policy, and Active Directory
- Strong desktop and general network administration skill set
- Experience with SIEM products, vulnerability scanners, firewall reviews, network devices, and intrusion detection/prevention systems
- Familiar with Cisco routing and switching security requirements
- Experience in participating in IT Security audits and remediating findings
- Familiar with NIST, ISO27001 other security standards
- Experience in performing risk assessments
- Strong analytical, problem-solving, and critical thinking skills
- Effective verbal and written communication skills
- Excellent verbal, written and relationship skills used to interact with a global group of technical and non-technical people
- Knowledge of network security
- Excellent analytical and problem solving capability
- Ability to show initiative and work independently and on teams
- Maintains contacts with Client auditors and prepares responses to audit reports
- Provides support for security reviews of new and existing systems
- Work closely with internal and external technology development teams to ensure all requirements are understood and implemented correctly
- Off-hours support coverage will be required (including weekends)
- Must be able to learn, understand and apply new technologies
Education and Experience:
- Bachelor's Degree in Information Technology, Information Security, or relevant field