Position Title:

IT Security Administrator

Contact Brittany Taylor recruiter@ptsgroup.com SUMMARY The Security Administrator is responsible for administering access controls for the ban !s net"or # applications and systems. Access controls are a critical element in the firm operations and must be carefully designed and constructed and continuously maintained. The Security Administrator "ill continuously monitor and update the controls as position# personnel and systems change and monitor all systems for $iolations of ban security policy and ta e necessary remedial actions to stop and pre$ent further $iolations. IT Security Administration is responsible for supporting the security monitoring and compliance systems. MANAGEMENT/ SUPERVISION %ay include super$ision of one or more non&e'empt technical support staff. JOB FUNCTIONS/DUTIES AND RESPONSIBILITIES (. *. Assists in defining# creating and implementing the company!s Information Security Policy)Procedures Pro$ides for user id and pass"ord management acti$ities. This includes assigning# re$o ing and changing user id access "hen properly appro$ed as "ell as monitoring for appropriate configuration. +. ,esponds to Information Security incidents in con-unction "ith the IS.. /. 0e$elops and monitors access controls for each user account. 1. %onitors access and roles to all systems and applications and report findings to the IS.. 2. %onitors net"or )elements for suspicious beha$ior and report to IS.. 3. 4or s "ith internal and e'ternal auditors# under direction of the IS.. 5. ,e$ie" of the net"or asset configuration changes per the company!s procedures. 6. ,e$ie" compliance "ith the information security policy and associated procedures. (7. Pro$ides periodic reporting on information security issues to the Information Security .fficer. ((. Interfaces "ith e'ternal contacts to maintain)administer accounts)controls REQUIREMENTS Bachelor!s degree or e8ui$alent "or e'perience %inimum of 1 years! e'perience as Information Security analyst)engineer Strong understanding)e'perience of "indo"s and 9inu' security Strong understanding)e'perience of ad)90AP)single sign&on :CA Siteminder; Strong understanding)e'perience of Cisco net"or # routers# s"itches# fire"alls :PI<)ASA;# etc IPS)I0S e'perience & forensic follo"&up# Snort# =itro a plus Strong understanding)e'perience of >P 4ebinspect# Core Impact# =essus# Burpe Suite or similar tools ?'perience "ith compliance testing :CIS benchmar s# patching $alidation# etc; Strong understanding)e'perience of Infosec standards such as =IST# @@?IC# CIS ,egulatory e'perience including but not limited to @0IC# State 0epartment of Ban ing and Insurance Ability to thin critically regarding needed infrastructure controls. Strong understanding)e'perience of Information Security role in the S09C process# including entitlement management# logging# separation of duties# and role creation matching -ob function. Applications e'perience in International Ban ing# %ulti&currency accounting# Alobal Securities Processing CISSP a plus