Temporary Information Security Analyst

Purpose of Job: Support ISO to fulfill the jobs of information security management function including but not limited to : IT security Operation Support; Cybersecurity Incident Response Program Operation; Core banking applications event log review / monitoring, etc.

I. Primary Responsibilities:

A. IT security Operation Support: a. participate in the core banking applications user provision; . provide IT infrastructure change management service; c. security event monitoring;

B. Cybersecurity Incident Response Program Operation: Review potential Intrusion Detection events, malware analysis, high severity security events, plan and initiate the response actions.

C. Log Analysis: Network traffic log analysis, core banking application log analysis, security control devices such as IDS log and analysis. Alliance with the Head Office security operation center (SOC), assistance to ISO to prioritize and develop a sustainable logging and security event monitoring solution for the bank, with a focus of low false alarm rate and scalability.

D. Check user/authority matrix and security parameter settings in mission critical application systems; check user/authority matrix in AIX and Windows network systems.

E. Assistance to ISO for the implementation and execution of Cybersecurity Programs such as coordinating security awareness training on an annual basis, publishing Cybersecurity newsletter for better user awareness education ; executing annual IT risk assessment and IT internal control examinations; coordinating penetration testing and vulnerability assessments, etc.

F. Assistance to ISO to coordinate the development or maintenance of security related systems or programs such as IDM, Cybersecurity Intelligence, etc. and perform tests of data processing system to ensure functioning of security measures.

G. Assistance for the support of Head Office and US regulatory audits in the Cybersecurity field.

II. Additional Responsibilities:

H. Work with the supervisor for any additional responsibilities.

I. Back up for other business functions as required.

J. Attend annual BSA/AML training program, assume responsibility, as appropriate, to report suspicious activity to BSA/AML Officer.

III. Qualifications Required:

A. Bachelor degree in science, engineering or technology.

B. Good interpersonal skills and ability to work effectively in a team environment.

C. Good project management and multi-tasking skills

D. Strong determination with attention to the details.

E. Good capability in learning new knowledge and skills.

F. Solid technical background in systems and network administration, as well as IT operation is a plus.