DATA SECURITY ENGINEER

JOB PURPOSE
To deploy, operate and maintain the appropriate data security solutions and tools and implement necessary controls to protect the bank’s information systems against internal and external threats in alignment with the bank’s approved security architecture framework.

Description
1.Monitor, implement and operate appropriate levels of Data security controls and systems according to enterprise Data security solutions on day-to-day basis, in order to keep business secured proactively against identified threats.
2.Provide first-level support for all managed systems and platforms including: Content Filtering, Sandboxing and others, in order to maintain business operations according to approved service level agreement.
3.Secure the access to corporate data and crown-jewels information through the operations of Data Loss Prevention (DLP), Secure Domain Name Services (DNS), Data Base (DB) Security, Internet based traffic content filtering, at all levels of the data security architecture in order to safeguard and limit access to key information system assets at all layers.
4.Implement, Operate, and Maintain Date Security, Protection and Classification program technologies, in order to provide the required levels of assurance that CIB information Security Data security policies applied and enforced.
5.Provide data security technical expertise for Project Management in order to enable bank’s Business Strategic Projects through maintaining a secure Software Development Life Cycle (SDLC) in the organization that complies with Business Strategic objectives, policies, procedures, rules and regulations.
6.Perform analysis of data security needs and contribute to design, integration, and installation of hardware and software, to ensure effective security architecture and controls over enterprise applications.
7.Ensure that data security current and new tools and technologies are deployed in line with architectural requirements, and the organization’s data loss prevention strategy and policies, in order to ensure effective controls according to business/compliance/regulation requirements.
8.Employ data confidentiality, integrity and availability controls in order to mitigate the risk of disclosure or alteration of sensitive information.
9.Provide technical expertise and guide the administration of data security tools that control and monitor information security, in order to keep business up and running seamless.
10.Develop and maintain monthly Key Performance Indicators (KPIs), security reports and dashboards across various data security solutions, in order to provide business with the required visibility.
11.Work with information systems owners and administrators to understand their data security needs and assist with implementing practices and procedures in alignment with CIB security policies.
12.Support Security Operations Centre and Information Security in Identifying, developing, and implementing mechanisms to detect/prevent data security incidents/gaps in order to enhance compliance with and support of security standards and procedures in place.
13.Respond to discovered security incidents by informing appropriate custodians, determining root cause, and identifying and executing remedial actions (if necessary) required to re-establish respective information system security.
14.Define and enhance, appropriate levels of Data security controls and systems according to data security solutions on regular basis, in order to keep business secured proactively against known threats.
15.Act as the technical lead in the development of responses to Request for Information (RFIs) and Request for Proposals (RFPs).
Policies, Processes and Procedures
16.Follow all relevant department policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner.
Day-to-day Operations
17.Follow the day-to-day operations related to own jobs in the IT Security, Control & Quality Assurance department to ensure continuity of work.
Compliance
18.Comply with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB’s sound legal position and mitigate any potential risks.

Qualifications & Experience
 Bachelor’s degree of Engineering, Computer Science or equivalent is must.
 Engineer: Minimum of 3 – 5 years of experience in IT Security and related disciplines.
 Should have an understanding of TCP/IP protocols, networking and firewall concepts.
 Enterprise data security architecture and software are required.
 Understanding of IT operations: help desk, end-point management and server management
 Experience in configuring and implementing technical security solutions
 Capability to effectively prioritize and execute tasks under pressure and time constrains.
Recommended Certifications
 Microsoft Certified Systems Administrator: Security
 GIAC Information Security Fundamentals & CCNP Security
Skills
 Good command of English and Arabic languages
 Good Communication, Negotiation and Time Management skills
 Good Analytical and Problem-solving skills