a) At least 5 years of Information Security working experience in a complex IT
(b) At least 5 years of working experience in Security Administration of one or more of the
following systems:
i) Active Directory
ii) Privileged ID Management tools
iii) Identity Governance & Administration tools
iv) Windows
v) Unix
vi) Linux
vii) MSSQL
viii) Oracle
ix) Mainframe
x) AS400
xi) Teradata
(c) Certification in CISSP, CRISC, CISM.
(d) Good Project Management experience and skills.
(e) Must be self-motivated, independent without much supervision, meticulous, systematic, dedicated, committed and result-oriented team player with strong initiative, and possess good inter-personal, communication, analytical and presentation skills.
(f) The candidate shall be required to perform some or all of the following duties according
to the area he/she is assigned to support:
i) Perform ID and Access control provisioning in one or more of the following systems:
- Active Directory
- Privileged ID Management tools
- Identity Governance & Administration tools
- Windows
- Unix
- Linux
- MSSQL
- Oracle
- Mainframe
- AS400
- Teradata
ii) Review and develop process for ID and Access control administration.
iii) Review IDs, Accesses and Security Settings to comply with polices and standards.
iv) Develop and maintain Baseline Security Standards (BSS) for Privileged ID Management (PIM), Identity Governance & Administration (IGA), Mainframe &
Database Computer (DBC) and AS400.
v) Conduct BSS compliance checks periodically for PIM, IGA, Mainframe & DBC and
AS400.
vi) Provide governance on the service provided by the Service Providers.
vii) Manage the escalation processes and perform service recovery for incidents that
directly impact services or users.
viii) Conduct internal security reviews.
ix) Assist in the extraction of artefacts for auditors.
x) Support periodic fixes/patches and upgrades.
xi) Assist in the planning, review and testing of the IT Business Continuity Plan.
xii) Ensure strict adherence to the Board’s internal processes, procedures and policies
for quality output as well as sound security controls.
