It Security Engineer Jobs

Description du poste

• Conduct annual Firewall rule review and monitor Firewall rule change management;
• Support IT Security and cybersecurity Awareness campaigns.
• Perform Scheduled Security Patch Assessments to validate that all servers and desktops are compliant;
• Prepare, organize, review & follow-up on Purple team exercise and its remediation projects;
• Continuous monitoring all Hosts to ensure continuous compliance to Head Office technical security standards and Server build standards;
• Function as the Backup for IT Sec Engineering Manager;
• Ensure security monitoring tools such as AV, DLP, patch agents are registered & monitored;
• Perform scheduled host discoveries to ensure all servers and desktops are accounted for and meet Head Office Standards in monitoring & coverage;
• Perform cybersecurity control;
• Support Continuous Monitoring Framework by effectively reporting the Key Risk Indicators (KRIs) and Key Control;
• Provide cybersecurity expertise for all IT and IT Security projects;
• Review network architecture designs;
• Ensuring that all areas of CA-CIB remain in full compliance with Security directives related to IT Security management as received from Head Office and other guidelines (FFIEC, NIST);
• Evolve the Security function by continuous assessment of our risks, threats & vulnerabilities;
• Prepare, organize, review & follow-up on pentests and remediation on all scopes;
• Maintain and update all local policies, procedures and standards;
• Awareness and development of controls and detection solutions to address malware, cybersecurity and advanced persistent attacks;
• Keep current in IT Security and cybersecurity industry trends;
• Respond to internal Audit findings by developing controls and documentation packages;
• Prepare, organize, conduct & follow-up on vulnerability scans and remediation on all scopes;
• Optimize all IS Security controls / processes through automation via scripts, tools and other means;

• Reports to the IT Security Engineering Manager

• All GIT/SIT/ISS groups in Americas & Paris
• Internal Audit team

• Varies per projects/incidents (IT, Business, Management, etc)