IT Security Analyst (1)
Job Purpose
The IT Security Analyst is responsible for supporting the implementation and day-to-day execution of the Bank’s cybersecurity controls, ensuring that technology infrastructure is secure, compliant, and aligned with defined cybersecurity policies and minimum-security baselines.
The role reports to the Application Security Manager and plays a key role in security assessments, vulnerability management, infrastructure protection, and operational support of security systems.
The IT Security Analyst contributes to ensuring that all systems across the BPR bank including networks, servers, cloud environments, endpoints, IoT, and enterprise platforms—are monitored, assessed, and secured against cyber threats.
The role also supports the operational management of internal security solutions and ensures timely remediation of identified vulnerabilities and audit findings.
Main Responsibilities
Conduct technical security assessments of infrastructure, systems, and platforms against defined minimum security baseline standards and report findings.
Support validation and enforcement of minimum-security configurations across infrastructure components before and after system deployment.
Identify, track, and follow up on remediation of vulnerabilities in collaboration with IT and SOC/CiSOC teams, ensuring adherence to defined SLAs.
Administer and support internal cybersecurity tools and solutions including handling operational tickets and routine changes addressed to information security
Assist in monitoring the security posture of networks, servers, endpoints, cloud, and IoT devices, and escalate identified risks.
Support cybersecurity reviews for ICT projects and changes, ensuring implementation of required security controls under guidance from the Application Security Manager.
Work closely with IT teams to ensure systems are patched, hardened, and compliant with defined security standards.
Provide support for internal and external audits by preparing evidence, tracking findings, and ensuring timely remediation of assigned actions.
Collaborate with SOC/CiSOC in identifying, reporting, and supporting the response to security incidents affecting infrastructure.
Maintain accurate documentation of security assessments, vulnerabilities, and remediation status, and provide regular updates to the Application Security Manager.
Daily Responsibilities:
Certifying user accounts and access.
Perform security checks and assessments on systems to validate compliance with baseline standards.
Manage and resolve operational tickets related to cybersecurity systems (e.g., firewall requests, endpoint issues, access controls).
Track and follow up on vulnerability remediation with IT teams.
Support enforcement of patching, hardening, and endpoint protection across the infrastructure.
Assist in monitoring alerts and escalate potential security threats or incidents.
Educational qualifications and work experience:
Bachelor’s Degree in B.Sc. Information Technology / Computer Science / Telecommunications /
Engineering or related field
Master’s Degree in MBA/MSc related field is an added advantage.
Professional Qualifications Certified Offsec Certification for Penetration testing like PEN-200, or PEN-300, CCNA Security, CCPN Security, CEH: Certified Ethical Hacker; CISA: Certified Information Systems Auditor; CISM: Certified Information Security Manager; CISSP: Certified Information Systems Security Professional, or any other related certification.
3 years Minimum experience in Security / System / Network / Database / Platform Administration, Information security policies as well as applicable government regulations, Security Baseline standards (Unix, Windows, Databases),
Encryption and Certificate Management, Identity and Access Management, Software Development, Security Assessment and Testing, Computer network penetration testing and techniques, IT or Information Security.
