Head of the Bank's Information Security Department (ISIS) in NEKSENT BANK, AT / JSC NEXENT BANK

Requirements:

• Higher education in IT, cyber security, telecommunications or related fields.
• Experience in Bank IS or IT from 1-3 years
• Understanding the principles of:
  • network security (TCP/IP, VPN, Firewall);
  • cyber threats and their detection methods;
  • management of vulnerabilities, accesses, logging;
  • Zero Trust models and protective mechanisms.
• Knowledge of tools is desirable: SIEM, EDR/XDR, DLP, IDS/IPS.
• Knowledge of NBU requirements and international standards: ISO/IEC 27001, NIST, PCI DSS (will be an advantage).
• Ability to analyze event logs, identify anomalies, work with large data sets
• Developed documentation skills, systems thinking, attention to details
• Preferred certifications: CompTIA Security+, CEH, ISO 27001 Foundation, Threat Intelligence, PECB (not required, but a plus).

Working conditions:

• Work in a stable and technologically oriented international bank.
• Participation in the development of modern IS systems and cyber protection.
• Opportunities for professional training, certifications and career growth.
• Competitive compensation and social guarantees.
• Flexible work schedule, modern tools and support of an experienced team.

Responsibilities:

• Monitoring of information security events (SIEM, SOC processes), incident analysis and their escalation in accordance with internal procedures.
• Participation in incident investigation IS, preparation of reports, proposals to prevent recurrence.
• Support of IS systems, in particular: antivirus platforms, DLP, EDR/XDR, vulnerability management systems, firewalls, PAM.
• Vulnerability analysis, participation in scanning processes, assessment risks, monitoring the implementation of remediation plans.
• Supporting access control processes, checking the correctness of user rights, participating in periodic access reviews.
• Supporting compliance processes with NBU requirements, in particular Regulations No. 95, No. 75, No. 88, cyber resistance, business continuity.
• Participation in information security audits, preparation of answers, collection of evidence base, support of inspections.
• Development and updating of IS internal documentation: policies, procedures, methods, response plans.
• Participation in the training of employees on cyber hygiene and information security requirements.