About the Role
As an Information Security Specialist within the IT-TTO-ICS -CSS business unit, you will play a pivotal role in safeguarding the digital assets and business operations of a global financial institution. This position focuses on managing and enhancing Email Security services as part of the Information Cyber Security Services (ICS) team, a group of cyber security thought leaders responsible for protecting the bank’s operations across 70+ countries. Your contributions will ensure the continuity, compliance, and ongoing improvement of the bank’s security posture in an evolving threat landscape.
Responsibilities
- Govern and manage on-premises and cloud-based Email Security and Endpoint solutions.
- Configure products, enhance security controls, and lead service improvement initiatives to address risk, compliance, and process challenges.
- Collaborate with service leads, business units, infrastructure teams, and security operations, providing technical guidance as needed.
- Translate business IT security requirements into effective and efficient technical measures.
- Handle and resolve priority security incidents, escalations, and severity issues in a timely manner.
- Contribute to product roadmaps and support capability advancement, including version upgrades, new features, and managing end-of-life (EOL) equipment.
- Participate actively in risk management, audit processes, and governance functions.
- Create and maintain documentation for security infrastructure, processes, runbooks, and operational manuals.
- Prepare and analyze reports using MS PowerPoint, Excel, and SIEM tools, correlating logs and presenting findings to stakeholders.
Qualifications
- Diploma or bachelor’s degree in engineering, Computer Science/Information Technology, or equivalent.
Required Skills
- Minimum 7+ years of experience in the Information Security domain.
- Hands-on experience with Email Security products such as Proofpoint, Microsoft MDO, etc.
- Practical knowledge of Antivirus solutions like Microsoft MDE, Intune, ePO, etc.
- Strong understanding of messaging platforms (Exchange, Office 365) and hybrid email architectures.
- Proficiency in email security controls: Anti-spam/malware, DMARC, SPF, sandboxing, URL filtering, encryption, and DLP.
- Solid grounding in information security principles, including the CIA triad, access controls, vulnerability/risk assessments, and auditing.
- Ability to automate routine business-as-usual (BAU) tasks.
- Understanding of Change, Incident, and Problem Management processes.
- Excellent written and verbal communication skills, with the ability to interact across all organizational levels.
- Strong presentation skills; ability to communicate technical concepts and roadmaps using MS PowerPoint, Excel, and Visio.
Preferred Skills
- Industry-recognized security certifications such as CISSP, CISM, CCSP, or CEH are highly desirable.
- Experience working in multinational or financial services environments.
- Demonstrated initiative in process improvement and automation.