JOB PURPOSE
To deploy, operate and maintain the appropriate data security solutions and tools and implement necessary controls to protect the bank’s information systems against internal and external threats in alignment with the bank’s approved security architecture framework.
1.Monitor, implement and operate appropriate levels of Data security controls and systems according to enterprise Data security solutions on day-to-day basis, in order to keep business secured proactively against identified threats.
2.Provide first-level support for all managed systems and platforms including: Content Filtering, Sandboxing and others, in order to maintain business operations according to approved service level agreement.
3.Secure the access to corporate data and crown-jewels information through the operations of Data Loss Prevention (DLP), Secure Domain Name Services (DNS), Data Base (DB) Security, Internet based traffic content filtering, at all levels of the data security architecture in order to safeguard and limit access to key information system assets at all layers.
4.Implement, Operate, and Maintain Date Security, Protection and Classification program technologies, in order to provide the required levels of assurance that CIB information Security Data security policies applied and enforced.
5.Provide data security technical expertise for Project Management in order to enable bank’s Business Strategic Projects through maintaining a secure Software Development Life Cycle (SDLC) in the organization that complies with Business Strategic objectives, policies, procedures, rules and regulations.
6.Perform analysis of data security needs and contribute to design, integration, and installation of hardware and software, to ensure effective security architecture and controls over enterprise applications.
7.Ensure that data security current and new tools and technologies are deployed in line with architectural requirements, and the organization’s data loss prevention strategy and policies, in order to ensure effective controls according to business/compliance/regulation requirements.
8.Employ data confidentiality, integrity and availability controls in order to mitigate the risk of disclosure or alteration of sensitive information.
9.Provide technical expertise and guide the administration of data security tools that control and monitor information security, in order to keep business up and running seamless.
10.Develop and maintain monthly Key Performance Indicators (KPIs), security reports and dashboards across various data security solutions, in order to provide business with the required visibility.
11.Work with information systems owners and administrators to understand their data security needs and assist with implementing practices and procedures in alignment with CIB security policies.
12.Support Security Operations Centre and Information Security in Identifying, developing, and implementing mechanisms to detect/prevent data security incidents/gaps in order to enhance compliance with and support of security standards and procedures in place.
13.Respond to discovered security incidents by informing appropriate custodians, determining root cause, and identifying and executing remedial actions (if necessary) required to re-establish respective information system security.
14.Define and enhance, appropriate levels of Data security controls and systems according to data security solutions on regular basis, in order to keep business secured proactively against known threats.
15.Act as the technical lead in the development of responses to Request for Information (RFIs) and Request for Proposals (RFPs).
Policies, Processes and Procedures
16.Follow all relevant department policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner.
Day-to-day Operations
17.Follow the day-to-day operations related to own jobs in the IT Security, Control & Quality Assurance department to ensure continuity of work.
Compliance
18.Comply with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB’s sound legal position and mitigate any potential risks.
Qualifications & Experience
Bachelor’s degree of Engineering, Computer Science or equivalent is must.
Engineer: Minimum of 3 – 5 years of experience in IT Security and related disciplines.
Should have an understanding of TCP/IP protocols, networking and firewall concepts.
Enterprise data security architecture and software are required.
Understanding of IT operations: help desk, end-point management and server management
Experience in configuring and implementing technical security solutions
Capability to effectively prioritize and execute tasks under pressure and time constrains.
Recommended Certifications
Microsoft Certified Systems Administrator: Security
GIAC Information Security Fundamentals & CCNP Security
Skills
Good command of English and Arabic languages
Good Communication, Negotiation and Time Management skills
Good Analytical and Problem-solving skills
Commercial International Bank was established in 1975 as a joint venture between the National Bank of Egypt (NBE, 51%) and the Chase Manhattan Bank (49%) under the name "Chase National Bank of Egypt”. Following Chase's decision to divest its equity stake in 1987, NBE increased its shareholding to 99.9%, changing the Bank’s name to Commercial International Bank (Egypt) S.A.E. NBE’s stake gradually decreased through several public offerings till reaching 18.7%. In 2006, a Consortium led by Ripplewood Holdings acquired NBE stake. In July 2009, Actis, a leading emerging markets private equity firm, invested US$ 244 million to get shares in CIB, acquiring hence 50% of the Ripplewood Holdings Consortium’s stake. Five months later, Ripplewood sold its remaining 4.7% stake over the open market, marking the successful transition of strategic partnership to be with Actis, who then became CIB’s largest shareholder with a 9.1% stake. In March 2014,Actis sold a portion of its holding, representing 2.6% of the Bank’s total outstanding shares, in the open market to a group of international investors. In May 2014, Actis, successfully realised its investment in CIB and sold its remaining 6.5% to Subsidiaries wholly owned by Fairfax Financial Holdings Ltd “Fairfax”.
CIB is Egypt’s leading private sector bank, offering a broad range of financial products and services to its customers, including enterprises of all sizes, institutions, households and high-net worth individuals. CIB strives to provide superior financial solutions to meet all customers’ needs. Having the strongest brand equity rightfully places CIB as the bank of choice for over 500 of Egypt’s largest corporations. CIB shows tremendous potential within the bourgeoning Retail and SME Banking markets. Through its superior management, high-operating standards, corporate governance best practices and training programs,CIB has succeeded in becoming the most profitable commercial bank operating in Egypt for more than 40 years.
