Dieses Jobangebot ist archiviert und steht nicht mehr zur Verfügung.
Vakante Jobangebote finden Sie unter Projekte.

Senior Security Specialist

Eingestellt von BIS

Gesuchte Skills: Design, Java, Soap, Network

Projektbeschreibung

Senior Security Specialist

Purpose of the job:
Work within the Corporate Security team to implement, coordinate and support the BIS's information security processes to maintain and improve BIS security operations and controls.

PRINCIPAL ACCOUNTABILITIES:

Provide internal management, expert advice and operational experience on information security risk and control matters throughout the organisation. This includes:

- Information security risk assessments: Design, implement and review the architectures, procedures and controls necessary to protect the safety and security of the Bank's information system assets. Focus on application security risks and controls, and work closely with various business areas in the design and review of cost-effective application security solutions. May also participate in premises-related risk assessments.
- Monitoring and compliance: Monitor, analyse and enhance the methods used by the BIS to detect security issues and handle security incidents. This also includes reviewing, reporting and following up on non-compliance with BIS security standards.
- Implementation and operation: Implement security solutions including the design, configuration, deployment and operation of security controls and tools, such as security information and event monitoring (SIEM), identity and access management, IDS/IPS, data loss prevention, digital rights management and network access control.
- Additional responsibilities: Lead technical security projects or represent the unit in related projects. Develop and enhance the BIS security policies and procedures. Participate in the gathering and analysis of information from security-related sources.

QUALIFICATIONS/SKILLS REQUIRED:

- Thorough knowledge of common security software (log analysis, vulnerability management, compliance checking, intrusion detection).
- The ability to communicate effectively with both IT and business area personnel is critical, including the usage of business-relevant terms to describe technology risks.
- Working knowledge of information security standards (such as ISO 27001, ISO 27002, ISO 27005) and effective means for their implementation.
- Team player, ready to take initiative and work independently, and able to develop support across the organisation for security initiatives. Must be able to multitask.
- Fluency in English. A second language, eg German, would be a plus.
- Certification in security-related disciplines and technologies would be an advantage (accreditation such as CPP, PSP, CISSP, CISA a plus).

WORK EXPERIENCE REQUIRED:

- At least five years in a similar role, with experience performing application risk assessments, monitoring compliance with security standards and implementing and operating security tools as mentioned above.
- Working knowledge of ICT systems and components, such as networking devices, firewalls and standard operating system operations.
- Work experience in securing some of the following platforms would be highly desirable: SOAP- and Java-based applications, PeopleSoft, financial trading and financial messaging systems.

The BIS employs staff on both open-ended and fixed-term contracts.  However, all new entrants are initially recruited on a fixed-term basis.  Due to our status as an international organisation we are in the privileged position to be able to recruit any nationality.

Projektdetails

  • Einsatzort:

    Basel, Schweiz

  • Projektbeginn:

    asap

  • Projektdauer:

    Keine Angabe

  • Vertragsart:

    Contract

  • Berufserfahrung:

    Keine Angabe

Geforderte Qualifikationen

BIS