Business Analyst for Security Assurance

For our banking client in Zürich we are currently looking for a Business Analyst for Security Assurance:

START: 01.10.2016
END: 31.12.2016
LOCATION: Zürich

Our client is currently seeking a Compliance Engineer to work closely with the Change Management team to help improve the validation standards. In the specific the aim is to improve the security assurance checks for the Infrastructure Compliance Validation program.

Must skills:
- Strong technical qualities - preferably in a global environment, ideally within the finance industry.
- Ensure security controls comply with industry best practice
- Provide assistance with check development to Subject Matter Experts
- Develop hardening/security assurance standards for various IT platforms
- Create, maintain and update documentation in knowledge base
- Investigate root causes for common baseline check failures
- Escalate and liaise with internal/external groups when required
- Experience in Operating system/Middleware hardening and security audits
- Ability to implement audit checks based on Center for Internet Security benchmarks
- POSIX permissions model: RBAC, SUID/SGID, sticky bits, octal/symbolic notation etc.
- Ability to understand and write/modify .NET-compatible Regular Expressions
- Ability to set up a working lab environment required for testing of checks/standards
- Good understanding of: - configuration parameters in Apache, Tomcat and IIS
- Administrative security settings in AIX, Solaris, RHEL, Windows and ESXi
- Common infrastructure, including Active Directory, GPO and Kerberos
- User database roles, permissions-model, security settings in Oracle/Sybase/MS-SQL
- Familiarity with technologies and tools such as SELinux, netstat, grep, process table etc.
- Previous experience with Symantec Control Compliance Suite considered a plus

Michael Bailey International is acting as an Employment Business in relation to this vacancy.