Security Architect

Position: Security Solutions Architect (Technical)

Location: Manama, Bahrain (onsite)

Banking domain experience - mandatory

Minimum 7 - 10 years of experience

Certifications (Desired): CISSP, CCSP, CEH, CCNP, AWS, Azure

Experience Desired: AWS Security Architect, Azure Security, Cisco Networks

REQUIREMENTS:

• Proficiency and working knowledge in technology stacks used in application development, Web applications, in particular secure application design.
• In depth knowledge of IT risks, cyber security, and computer operating software like Windows, Linux, and UNIX.
• In-depth knowledge in the software's design with the aid of programming languages like Python, Java, etc
• Advanced understanding of security protocols, cryptography, and security.
• Understanding of network protocols, Source Code Reviews and OWASP Top 10 security practices.
• In-depth knowledge of frameworks used in developing applications.
• Good understanding in security measures such as firewalls, intrusion detection, and prevention systems (IDS/IPS), network access controls, and network segmentation
• Knowledge of DNS, Security principles of routing, authentication, VPN, proxy services, and DDOS mitigation technology.
• Expertise in the architecture of information security systems.
• Good knowledge of IT Infrastructure, Cloud Technologies like AWS, Azure, and Information Security systems, specifically in architecture.

RESPONSIBILITIES:

• Perform security analysis, develop robust security architecture, and ingrain security solutions into the Bank's Group environment ensuring the confidentiality, integrity and availability of the bank's information
• Develop security architecture for various Information Security control systems
• Perform Information Security Risk Assessments of new IT systems, design and recommend security controls to mitigate risks, reassess and enhance security architecture as needed.
• Review security architecture of new technology solutions and business applications, assess security, and recommend security controls to address security risks.
• Research and recommend/implement the security standards, systems, and best practices
• Review system security, recommend security controls, and implement enhancements.
• Review system security, recommend security controls, and implement enhancements.
• Evaluate and implement information security technologies and countermeasures against threats to information.
• Review technical service request and technical changes raised by IT users for Information Security risks.
• Follow Security by Design methodology to assure the end-to-end security.
• Develop security baseline for all IT assets, such as routers, firewalls, LANs, WANs, VPNs, and other network devices, and ensure the efficacy.
• Provide security architectural guidance to IT
• Understand the risk and weakness in applications
• Secure application design and architecture, and application security testing

COMPETENCY

• Acting with Integrity
• Accepting Responsibility
• Supporting Organizational Goals
• Communicating Effectively
• IT Architecture & Systems Integration
• IT Security and related risks
• Understanding Existing & Emerging Technologies
• Risk control

SKILLS

• Cyber Security Compliance
• Cyber Security Monitoring
• Cyber Security Analysis
• Cyber Security Architecture
• Cyber Security Audits
• Cyber Security Best Practices
• Cyber Security Testing
• Cyber Security Standards and Procedures