IT SECURITY EXPERT

IT SECURITY EXPERT

1. Technical description of the mission s environment Material:

PC Laptop Software: Pack Microsoft Office Service Now Archer.

2. Results expected / Deliverables: the aim will be to:

CYBER INCIDENT RESPONSE Monitor and investigate security alerts ; Ensure response to cyber security incidents when required; Monitor and manage DDoS incidents; Conduct incident postmortems; Contribute to potential cyber crisis cells; Understand and adapt detection use cases to business requirements; Perform a security watch on different channels observe the development of threats and prepare reports; Identify new threats; Support digital forensics and investigations (DFI); Draw lessons from past events and observations to continuously improve response capabilities; Communicate and collaborate at different levels of technical literacy adapting contents based on the audience; Keep uptodate with the latest security and technology developments especially threats and vulnerabilities.

DATA LOSS PREVENTION AND DATA SECURITY Monitor and manage data loss events through different channels (exfiltration accidental disclosure PII data breach public/social media sharing); Act as L3 expert and coordinate L2 analysts in their daytoday DLP activities; Ensure communication and coordination with all relevant (nonIT) stakeholders.

METRICS AND REPORTING Generate and maintain KPIs/KRIs on incident response data loss application security vulnerability management and other relevant activities; Create (or collaborate in creating) dashboards for cyber incident and crisis management DLP and DDoS; Produce reports; summarize information for a wider audience; Maintain and improve automated reporting tools.

KNOWLEDGE MANAGEMENT Analyze propose and implement improvements to our CSIRT processes and procedures; Update and maintain procedures; Analyze and document new security processes when needed.

3. Prerequisites/ Agreed essential elements : as part of the mission the nonexhaustive list of prerequisites is as follows:

Business: IT Bank / Funds industry.

Norms & Process: Agile concepts / Information Security standards / ISO27001 / NIST.

Technical: Archer / Service Now / Symantec DLP.

Functional: Security assessment / DLP monitoring / Incident management

Technological: Archer / Service Now / Symantec DLP.

Language: French / English.