Security Administrator

Job Description

Security Administrators must execute user access requests, maintain access controls for various resources, and foster data security awareness. They must stay current in security technology and assist in the development and installation of new security hardware and software and provide security-consulting services to their management. Management authorizes all lawful actions of the Security Administrators in the investigation and prevention of security violations and the protection of information.

Principal Duties Include: 

1. Responsible for security control for all the data systems and information security systems

• Planning and implementation of information security controls
• Provide daily security administration of all assigned systems
• Review audit trails and access control violations, reporting such violations to the Monitoring Team and management when necessary. This function is limited to those systems not yet migrated to the Monitoring and Engineering Team
• Assist users with problems, taking corrective action when necessary
• Respond and take corrective action for Help Desk calls by reviewing and acting on entries in the Remedy System
• Maintain security administration databases with up to date information, making entries as changes occur during the workday
• Provide technical support for Americas Offices as requested
• Provide technical support for new systems before, during and after implementation.
• Review Security Controls making adjustments when necessary
• Specialist in managing security administration of Head Office Systems and Trading Room applications
• Assigned a specific role as a project management lead

2. Develop and update Security Procedures

• Create and update security procedures in conjunction with the Security Administration Team Leader
• Document security administration procedures
• Ensure the complete documentation of each system
• Review and maintain existing security procedures.
• Ensure that audit procedures exist for critical systems

3. Provide support for Business Continuity efforts including test participation. Act as an alternate BPO (Business Process Owner) for System Security Administration team in case System Security Administration team leader is not available during a disaster recovery situation.

4. Maintain up to date knowledge of current industry trends in information security

5. Provide Support for internal and external auditors and examiners by preparing reports, gathering information and answering questions

Qualifications

1. Minimum two years of experience in security administration with specific knowledge of:

• IBM Tivoli
• Windows Active Directory
• Network/Internet Security (desirable)
• IBM AS/400, RACF (desirable)
• Microsoft Windows NT Server and Windows 2000/2003, 2008 Server, and Windows 7 workstations
• Lotus Notes versions 7.x and 8.x (desirable)
• UNIX (desirable)
• Sybase (desirable)
• Oracle (desirable)
• SQL (desirable)

2. Previous banking experience (desirable)

3. Excellent verbal and written communication skills

4. Knowledge of FFIEC standards for EDP

5. Ability to work independently

6. Strong interpersonal Skills

7. Ability to interact at all levels of management

Additional Information