of the Department/Section:

ITRisk, Security & Control department covers cyber security strategy maintenance and tactical planning and operations to provide IT Security protection, governance, riskmanagementand reporting.This includes promoting Head Office Information Security Standards and Procedures (ISSP) requirements and local security requirements.The department supports and monitors security solutions such as virus protection, vulnerability management, compliancemonitoringand threat/incident management activities to reduce risk.

MainPurpose of theRole :

TheCyberarkPAM Technicalresourceis responsible formanagementand support of the PAM estate.The rolemanagesthe execution ofproject/productcybersecurity elements across cross-portfolio programs andservicesExecutionsinclude working with multiple security, IT andother leadershipstakeholders and a variety of security, IT and engineeringtechnical resources toidentify,planand delivercybersecurity initiatives. Deliverables include, but are not limited to:

• Tosupport thedelivery ofcyberprojectswithinagreedscope,costand timescale.

• Todeliver technical solutions across the Cyber security platform

• To manageand work independently or as part of a team in delivering complex projects

Responsibilities:

For dual hat only:

In this role,youwillbe responsible forxxx acrossXXXbanking arm and securities business under a dual-hat arrangement. Under this arrangement,youwill act and make decisions on behalf of both the bank and the securities business, subject to the same remit and level of authority, and irrespective of the entity which employsyou

In this role, you willbe responsible forcybersecuritytechnicalproject deliveryacrossXXXbanking arm and securities business under a dual-hat arrangement. Under this arrangement, you will act and make decisions on behalf of both the bank and the securities business, subject to the same remit and level of authority, and irrespective of the entity which employs youKey responsibilities include but, but not limited to:

• Interpretecybersecurity relevant regulatory and other requirements or best practices and translate these to business aligned cybersecurityprogrammerequirements.

• Manage the delivery ofcybersecurityprojectswithinagreedscope, cost and timescale across Bank and Securities.

• Support of thedelivery of the cyberportionofallocatedCross Portfolio projectsincludingimplementation of cyber projects

• Thetechnical resourcewillbe responsible forsupport andexecution of the following deliverables asrequiredbusiness requirements, technical design and architecture, engagement with other infrastructure teams,

Skills andExperience:

Functional / Technical Competencies:

Essential

• Responsible foridentifyingand onboarding (DNA scan/Account discoverymodule)ofprivileged accounts into CyberArk acrossall theplatforms.

• Minimum3+ years of CyberArk experience and good knowledge on other PAM tools.

• Strong communicationskills are critical

• Strong understanding of different CyberArk Components like CPM/PSM/PVWA/Vault etc.

• Good Understanding of Rest API( Ifeel like this should be optional or “nice to have”)

• Good knowledge in CPM Plugin and PSM Connector Development.

• Proficient within many LDAP directory style platforms

• Basic understanding of Windows Server Administration

• Experience in Metrics tools likePowerBI, Tableauetc.(good to have)

• Good knowledge in PowerShellscripting.(good to have)

• Basic Unix administration knowledge

• CyberArk certification or Security related certification.

• Develop and Customize CPM plugins and PSM Connectors

• Facilitate calls with the end users to explain the importance of management of Privileged accounts

• Identifythe automation opportunities and work on it.

• Ability to create documents of high quality. Ability to work in structured environment and follow procedures,processesand policies

• Identifyarea of improvement and propose enhancements to existing environments

• Maintaina high levelof procedural documentation with the international standards of Quality Management.

• Excellent troubleshooting and problem-solving skills

• ExperienceofInformation Security, and a solid IT background.

• Detailed knowledge of the Access Control and Privileged Access Management domains, including the Tools, Techniques and Procedures used.

• Extensive knowledge in CyberArk PAM capabilities protecting Hybrid Environments (On-Prem, AWS, Azure)

• Experience in creatingdetailedwork breakdown structure for PAM implementation.

• Ability to work with multiplestake holdersfrom Security, Operations, Application Owners and Service Providers on deployment activities and enhancing the PAM solution.

• Clear understanding of Operating systems, Database conceptsand otherspotential targets or endpoints for a typical PAM Solution.

• Experience in defining PAM processes and role definition with knowledge of native access control mechanisms.

• Understanding of access control mechanism for Operating systems and Databases and other potential target devices.

• An aptitude and interest for future innovations & technologies as well a willingness to continually learn and nurture those around you

Work Experience:

Essential:

• Experience in working onmultiple projects with broad scope, ambiguity, and high degree of difficulty

• Experience in technology projects such as implementation of Cyber infrastructure replacement etc.

• Demonstrableproficiencyin a wide range of information IT security technologies and embedded security; at the minimum knowledge must cover key cybersecurity domains such as Identity and Access Management,IncidentManagementPosessinghigh levelof analytical ability where problems are typically unusual and difficult

• Ability tomaintaina working knowledge of cybersecurity principles and elements

• Understand global program structure, launch plan and timing, and global program ownership

• Demonstrable experience of senior stakeholder management and relevant management reporting.

• Ability to coach team members through knowledge transfer and constructive feedback

Education / Qualifications:

• Minimum 5 years’ experience in the above-mentioned skillset

• Minimum3+ years of CyberArk experience and good knowledge on other PAM tools.

PersonalRequirements:

• You are a leader and an expert in delivery ofcyberframeworksand associated key solutions

• A demonstrable passion for cybersecurity

• Excellent communicationleadership/interpersonalskills;results driven and withstrong senseof accountability

• You are experienced in engaging and persuading teams to accept andparticipatein best-in-class security architecture and operations

• Data driven,abilityto analyze data needed to effectively measure progress against the execution of objectives

• You successfully convey technical information in an understandable way that generates results

• A troubleshooter who proactively removes roadblocks and pursues solutions toproblems that stand in the way

• You value and develop trusted relationships at every operational level

• The ability tooperatewith urgency andprioritisework accordingly

• Strongdecision makingskills, the ability todemonstratesound judgement

• A structured and logical approach to work; Strongproblem solvingskills

• A creative and innovative approach to work

• Excellentpresentationskillsand excellent attention to detail and accuracy

• The ability to manage large workloads and tight deadlines

• A calm approach, with the ability to perform well in apressurisedenvironment

Cyberark