Verified Job
Accounting - Finance
TISO Information Security
Accounting - Finance
#320801
Remote / WFH
Job Description
Job Description:
Profession:
Information Security
Role:
TISO
Corporate Title:
AVP
Role typically reports to:
Divisional - TISO
Role Description
TISO is responsible to enforce Information Security compliance within their area of responsibility in line with the CISO mandate and strategy as well as the bank's risk appetite. Furthermore, TISOs are the experts and points of escalation for all IT security related aspects of the IT assets in their area of responsibility. They provide guidance on how to implement technical control aspects and achieve compliance to the related Information Security controls and ensure appropriate handling of any relevant exceptions. In close cooperation with the respective Chief BISOs they support the business divisions as well as the COO IT counterparts to comply with Security Controls.
What we'll offer you
As part of our flexible scheme, here are just some of the benefits that you'll enjoy
• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above
Your key responsibilities
• Align standards, frameworks and security with overall business and technology strategy
• Identify and communicate current and emerging security threats
• Create solutions that balance business requirements with information and cyber security requirements
• Train users in implementation or conversion of systems
• Derive the IT Security strategy from the overall Chief Information Security Office (CISO) strategy and requirements and translates this into an operational plan for delivery for their area of responsibility
• In relation to the IT Assets, processes within their scope of responsibility they:Drive integration of Chief Information Security Office Initiatives, programs and central solutions and ensure alignment with the divisional portfolios.Ensure effective and efficient communication, coordination and implementation of CISO IT Security requirements and decisionsAre responsible for the adoption of centrally mandated Security Solutions and the maintenance of technical security documentation and compliance to security controls.Are the recognized expert in DB Information Security Policies and procedures and their implementation in relation to technologies.Proactively manages IT audits and plan (in co-operation with COO IT management) preparation and remediation.Ensure appropriate senior management awareness/oversight of follow-up on action items to resolve identified issues, e.g. information security reviews of vendors, audit issue resolution.Spearhead independent reviews of IT Security Controls, prioritise identified issues and assesses remediation actions for quality, considering the optimal cost-risk ratio as well the strategically optimal resolution (e.g. Information Security control evaluation and respective follow up activities).Verify remediation concepts for critical and systemic issues and monitors their execution according to plan and with quality.
• Partner with key stakeholders (Chief BISOs and IT management etc.) to act as mediator and subject matter expert for them on Information Technology Security topics. Ensure a common understanding of Information Technology Security risks and their implications for the Group and for their scope of responsibility.
Your skills and experience
Experience of 8-12 years in:
• Security considerations of cloud computing: They include data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss and DoS attacks.
• Identity and access management (IAM) – the framework of security policies and technologies that limit and track the access of those in an organization to sensitive technology resources.
• Experience with and knowledge of:
• VB.NET, Java/J2EE, ColdFusion, API/web services, scripting languages and a relational database management system (RDBMS) such as MS SQL Server or Oracle. These are some of the technical elements needed to build security into an organization.
• ISO27001 – specifications for a framework of policies and procedures that include all legal, physical and technical controls involved in an organization's risk management
• Control Objectives for Information and Related Technologies (COBIT)
• Windows and UNIX environment.
• General skills include:
• Exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills
• Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects
• The ability to be the enterprise security subject matter expert who can explain technical topics to those without a technical background.
Education/Certification
• Degree in Information Security or a comparable education
How we'll support you
• Training and development to help you excel in your career.
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression.
• A range of flexible benefits that you can tailor to suit your needs
Profession:
Information Security
Role:
TISO
Corporate Title:
AVP
Role typically reports to:
Divisional - TISO
Role Description
TISO is responsible to enforce Information Security compliance within their area of responsibility in line with the CISO mandate and strategy as well as the bank's risk appetite. Furthermore, TISOs are the experts and points of escalation for all IT security related aspects of the IT assets in their area of responsibility. They provide guidance on how to implement technical control aspects and achieve compliance to the related Information Security controls and ensure appropriate handling of any relevant exceptions. In close cooperation with the respective Chief BISOs they support the business divisions as well as the COO IT counterparts to comply with Security Controls.
What we'll offer you
As part of our flexible scheme, here are just some of the benefits that you'll enjoy
• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above
Your key responsibilities
• Align standards, frameworks and security with overall business and technology strategy
• Identify and communicate current and emerging security threats
• Create solutions that balance business requirements with information and cyber security requirements
• Train users in implementation or conversion of systems
• Derive the IT Security strategy from the overall Chief Information Security Office (CISO) strategy and requirements and translates this into an operational plan for delivery for their area of responsibility
• In relation to the IT Assets, processes within their scope of responsibility they:Drive integration of Chief Information Security Office Initiatives, programs and central solutions and ensure alignment with the divisional portfolios.Ensure effective and efficient communication, coordination and implementation of CISO IT Security requirements and decisionsAre responsible for the adoption of centrally mandated Security Solutions and the maintenance of technical security documentation and compliance to security controls.Are the recognized expert in DB Information Security Policies and procedures and their implementation in relation to technologies.Proactively manages IT audits and plan (in co-operation with COO IT management) preparation and remediation.Ensure appropriate senior management awareness/oversight of follow-up on action items to resolve identified issues, e.g. information security reviews of vendors, audit issue resolution.Spearhead independent reviews of IT Security Controls, prioritise identified issues and assesses remediation actions for quality, considering the optimal cost-risk ratio as well the strategically optimal resolution (e.g. Information Security control evaluation and respective follow up activities).Verify remediation concepts for critical and systemic issues and monitors their execution according to plan and with quality.
• Partner with key stakeholders (Chief BISOs and IT management etc.) to act as mediator and subject matter expert for them on Information Technology Security topics. Ensure a common understanding of Information Technology Security risks and their implications for the Group and for their scope of responsibility.
Your skills and experience
Experience of 8-12 years in:
• Security considerations of cloud computing: They include data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss and DoS attacks.
• Identity and access management (IAM) – the framework of security policies and technologies that limit and track the access of those in an organization to sensitive technology resources.
• Experience with and knowledge of:
• VB.NET, Java/J2EE, ColdFusion, API/web services, scripting languages and a relational database management system (RDBMS) such as MS SQL Server or Oracle. These are some of the technical elements needed to build security into an organization.
• ISO27001 – specifications for a framework of policies and procedures that include all legal, physical and technical controls involved in an organization's risk management
• Control Objectives for Information and Related Technologies (COBIT)
• Windows and UNIX environment.
• General skills include:
• Exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills
• Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects
• The ability to be the enterprise security subject matter expert who can explain technical topics to those without a technical background.
Education/Certification
• Degree in Information Security or a comparable education
How we'll support you
• Training and development to help you excel in your career.
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression.
• A range of flexible benefits that you can tailor to suit your needs
