Principal Specialist - Cyber and IT Security Engineering

About the role

CIMB is looking for a Principal Specialist in Cyber and IT Security Engineering. The role ensures that the bank's IT systems and applications meet business needs while following security best practices, compliance and regulatory requirements, and delivers and fully operationalizes key security tools.

Key responsibilities

• Lead and implement multiple security solutions and technologies across one or more IT security domains (EDR, PAM, SIEM, IPS/IDS), with exposure to other domains such as cloud security.
• Manage security programs and stakeholders so that security practices follow policy, standards, SOPs and processes.
• Analyze and prepare security recommendations for existing IT infrastructure and applications.
• Support and maintain enterprise security solutions such as firewalls, IDS/IPS and proxies.
• Articulate threats and risks to business and technology leaders, mentor and train colleagues, and keep documentation current.

Required profile

• Minimum bachelor's degree in computer science; security certifications such as CISSP, CISM, SANS, GSEC are preferred.
• Other certifications such as PMP, ITIL, Microsoft or Cisco are preferred but not required.
• At least 5-8 years of experience in a large-scale IT environment, including 5 years of information security and risk experience in the last 6 years covering risk analysis, endpoint, server, network and web application security.
• Strong analytical, technical and communication skills, ability to work independently and as part of a team, and a strong interest in information security.

Required skills

• Good understanding of TCP/IP and the OSI seven-layer model.
• Expert knowledge of firewall technologies and hands-on experience with IDS/IPS and proxy solutions.
• Advanced knowledge of Windows and/or Unix systems and architectures, cryptography, LAN/WAN and VPN technologies.