اعلان توظيف صادر عن البنك الاردني الكويتي -لا تشترط الخبرة
وصف الوظيفة:
“We hire great people from a wide variety of backgrounds, not just because it is the right thing to do, but because it makes our company stronger.”
Why Does Information Security Interest You? Discovering Your Passion for Information Security?
When you develop your knowledge and skills in Information Security, you are more likely to boost your performance and enjoy every part of your work. Information security keeps on evolving, and even now there are many roles to choose from. Do you feel ready to dive in? If yes, we suggest you learn more about this opportunity below
We are looking for a Junior Information Security Officer, who is responsible for daily monitoring of users and systems activity on the bank’s network, reviewing, analyzing and reporting security logs and alerts for the variety of logs sources in the bank. The officer also monitors adherence to the approved Information Security Policies, contractual obligations and regulatory requirements. The officer will be engaged in the change management cycle to conduct the required risk assessments and ensure remediation controls are implemented upon systems changes and new projects.
Main Duties and Responsibilities:
1. Reviewing, analyzing and reporting security and activity logs from different log sources including Applications, Firewalls, IPS/IDS, Antimalware, APT and EDR, FIM, OS, DBs, DLP, etc.
2. Perform regular monitoring and revision of the user access management process.
3. Run and report internal and external vulnerability scans and follow-up remediation actions.
4. Participate in regulatory compliance and certification tasks including PCI DSS, SWIFT CSP, COBIT2019 and ISO27001.
5. Conduct and report risk assessments for changes and new projects.
6. Perform and report firewall rules in regular reviews.
7. Conduct Information Security Awareness and phishing simulations.
8. Monitor threat intelligence sources and report findings.
9. Participate in the cybersecurity incident response team.
10. Study and evaluate exceptional IT resource access requests.
11. Review and monitor configuration standards to ensure security compliance.
12. Conduct and report network segmentation tests.
Qualifications & Skills:
1. Minimum Bachelor’s degree in Information Technology/Computer Information Systems or any related stream.
2. To be familiar with cybersecurity technologies and systems.
3. Professional certificates are preferred i.e. Security+, CEH, ISO27001
