SME IAM Project management

Job Summary

PURPOSE:

Information Cyber Security Services (ICS) is a critical function within Standard Chartered Bank operating under the overall purview of “Technology Services”.

The ICS team is made up of cyber security thought leaders, who are accountable for the provision of a global set of cyber security services and products to maintain and continuously improve Bank’s cyber security posture in today’s ever evolving cyber security landscape.

The ICS team protect the Bank from cyber security threats by delivering effective information security technology services, managing and responding to security incidents to ensure, and support the continuity and growth of Bank’s business operations; and meet both internal and external stakeholders’ expectations across 70+ countries and territories, in which SCB operates.

In ICS – CSS tower, we need a candidate for the Email Security service to manage the day-to-day BAU activities, enhance the existing process, bring in automation ideas and identify opportunities to introduce new email security controls.

Key Responsibilities

RESPONSIBILITIES:

• Govern and manage on-prem and cloud-based Email Security and Endpoint solutions.
• Manage product configuration, enhance the security controls, and lead service improvement programs to mitigate the risk, compliance and process issues.
• Collaborate with Service leads, business teams, infra teams, security operations and offer technical guidance.
• Understand the IT security requirements of the business and implement measures to satisfy those requirements in the most efficient manner.
• Handle priority, severity issues/incidents and escalations.
• Work on product roadmaps and compliment capability roadmaps like version upgrades, new functionality, EOL equipment.
• Contribute to the Risk, Audit hygiene and governance for the function.
• Documentation of security infrastructure, process, run book and operational manuals.
• Reporting and log correlation using MS PowerPoint, Excel and SIEM solutions.

Skill Requirements

COMPETENCIES (KNOWLEDGE & SKILLS):

• Minimum 7+ years’ experience in Information Security Domain.
• Hands-on experience on any of the Email Security products like Proofpoint, Microsoft MDO etc.
• Hands-on experience on Antivirus solutions like Microsoft MDE, Intune,ePO etc.
• Good understanding of Messaging platforms like Exchange and o365.
• Good understanding of email architecture including hybrid email models.
• Strong understanding of controls like Anti-spam/malware, DMARC, SPF, Sandbox techniques, URL filtering, email encryption and DLP.
• Strong understanding of information security concepts like CIA triad, access controls, vulnerability assessment, risk assessment, auditing etc.
• Ability to automate mundane/manual tasks in BAU.
• Knowledge and understanding on Change, Incident and Problem Management.
• Strong written and verbal communication skills to interact at all levels of the organization, from senior executives to technical experts.
• Good presentation skills using MS PowerPoint, Excel and Visio to explain service roadmaps, architecture and new feature roll out to business and technical stakeholders.
• Diploma or bachelor’s degree in engineering, Computer Science/Information Technology or its equivalent
• Good to have any of the industry recognised Security Certifications like CISSP, CISM, CCSP, CEH.

Other Requirements