Infrastructure Cyber Security Officer

Job Purpose

To optimize and advance the Bank's infrastructure security posture through proactive security tuning, enhancement of security controls, and continuous improvement of security operations as well as to ensure that security technologies and processes are effectively configured, maintained, and evolved to address the dynamic threat landscape faced by banking institutions.

Responsibilities

• Operate, monitor, and maintain daily cybersecurity tools including WAF, DLP, Key Vault, SSL Certificate and other security platforms.
• Configure, fine-tune, and optimize security controls to ensure effective protection and minimal false positives.
• Monitor security alerts, investigate incidents, perform root cause analysis, and ensure timely remediation.
• Provide troubleshooting support for security-related issues across servers, endpoints, and network infrastructure.
• Manage and enhance DLP policies, monitor dataprotection events, and coordinate with business units for corrective actions.
• Support security hardening, patch validation, and access control enforcement across infrastructure.
• Participate in security enhancement initiatives and recommend improvements to strengthen overall security posture.
• Balance operational responsibilities with continuous improvement and optimization activities.
• Prepare incident reports, technical documentation, and professional communication for stakeholders.
• Maintain high ethical standards when handling sensitive security information.
• Support critical security operational tools incident outside business hours when required (on-call support).
• Manage multiple priorities effectively in a fast-paced environment.
• Continuously enhance technical knowledge and stay updated with emerging threats and best practices.
• Perform other tasks as assigned.

Qualifications

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, or related field.
• Minimum 2-3 years of progressive experience in cybersecurity operations or infrastructure security.
• Professional cybersecurity certification (e.g., Security+, CySA+, CEH, or equivalent) preferred.
• Strong knowledge of security tools such as EDR, WAF, DLP, NAC, PAM, and related technologies.
• Proficiency in configuring and securing Windows Server, Linux systems, and network infrastructure.
• Experience in security control tuning, optimization, and continuous improvement.
• Solid understanding of data protection concepts and DLP policy management.
• Strong analytical and problem-solving skills with the ability to conduct root cause analysis.
• Good troubleshooting capability across systems, endpoints, and security platforms.
• Ability to prioritize tasks and manage multiple responsibilities in a fast-paced environment.
• Good communication and coordination skills for cross-team collaboration.
• Intermediate proficiency in reading technical documentation and writing professional reports.
• High ethical standards and sound judgment in handling sensitive security information.
• Proactive mindset with initiative and willingness to learn and improve continuously.
• Availability for on-call support and response to critical incidents outside business hours.