Information Security Engineer

Job Purpose

Understand information security, technology architecture and business security.Design, direct, and deliver on IT security-related activities in an organization. Serve as a bridge between the employee—often the end-user of security processes—and the technical aspects of IT security. Collaborate, work with their teams to develop strong security systems.

Accountabilities:

• Input into the design and implementation of standards, policies, guidelines, and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met.
• Provide risk-based direction in conjunction with IT Services for future system enhancements in line with the overall company strategy.
• Recognize potential opportunities for enhancing the company security, ensuring minimal impact to practitioners.
• Provide subject matter expertise to support business relationship management functions.
• Act as Data Protection Officer ensuring systems and the information within them comply with current and future (as much is known) requirements.
• Ensure that company has an effective Data Classification process in place and has an effective data retention and archiving process in place
• Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information Security meets agreed standards.
• Develop and implement security related procedures required for day-to-day activities
• Identify security requirements for new applications and other software products
• Advise management on security issues, including legislation and adoption of new security technologies.
• Manage implementation of security and control techniques as per business requirements and review periodically for on-going validity.
• Facilitate, guide, or support for high severity security incidents.
• Evaluate the proposed Disaster Recovery and Business Continuity plans for new systems implementations and major systems modifications.
• Apply and maintain specific security controls as required by organisational policy and local risk assessments to maintain confidentiality, integrity and availability of business information systems and to enhance resilience to unauthorised access.
• Recognize when an IT network/system has been attacked internally, by a remote host, or by malicious code, such as virus, worm, or Trojan etc., or when a breach of security has occurred
• Contribute to vulnerability assessments.