To drive the adoption of Information Security Policies & Systems Security Standards across all Ecobank Technology group. The Systems Security Engineer will be responsible for implementation of all initiatives aimed at building the appropriate information security controls by ensuring the integration of security capabilities into systems such as Windows, Linux, AIX and BYOD devices in the corporate cloud and on-premises ecosystem.

JOB CONTEXT 
Implement security systems by adhering to specified methodologies, implement and review preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support and completing documentations.

KEY RESPONSIBILITIES 
Responsible for the development and implementation of controls around cloud, endpoints, servers, and identity security to ensure secured access to all Windows, Linux, AIX systems on-premises and in the cloud.
Maintains Windows, Linux, AIX, Cloud systems security by monitoring and ensuring compliance to standards, policies, procedures, and recommended improvement actions on the various cloud security portals.
Recommend systems security improvements on Windows, Linux, AIX systems and BYOD devices by assessing as-is; evaluate trends and threat landscape; emerging technologies and engage the appropriate change management to implement the recommendations.
Upgrade security systems and monitor the security environment and ensure the implementation of all recommended enhancements derived from security gap assessments.
Participates in Project Management activities as technical support for Systems Security programs and initiatives
Review and recommend areas of information management and security that require the establishment of policies and standards in the organization
Proactively protect the integrity, confidentiality, and availability of information in the custody of or processed by the bank whiles identifying unauthorized changes to authentication and authorization systems.
Ensure all systems security standards and controls securing Cloud Service Providers are effectively deployed and managed
Continuously work with various teams to implement systems security controls for new integrations, initiatives, projects, and controls for existing projects
Continuously work with Security Administration to properly handover implemented systems security capabilities, transfer knowledge and troubleshoot implemented systems security capabilities, perform upgrades and capacity planning
Continuously work with the Incident management and Information Security teams to review and perform assurance activities on implemented systems security capabilities as part of the Purple team activities.
Continuously work with the Affiliates InfoSec teams to ensure efficient drive of compliance by organizing workshops around implemented security capabilities, reporting and tracking.
Implement end-to-end systems security solutions across Ecobank Group IT ecosystems
Work with the Group Operation (Database Team) to design, develop, implement, and support secured database solutions using corporate policies, standards and current industry database tools and technologies
Work with the database team to assess and ensure database security compliance with policies, standard, regulatory requirements and best practices
Monitor the database security environment and identify security gaps, evaluate them, and implement enhancements
Ensure all database traffic across the group are secured by ensuring principles such as vaulting, firewalling and Encryption have been implemented
Implement controls to protect the integrity, confidentiality, and availability of information in the custody of or processed by the Bank

JOB PROFILE 
Experience & Qualifications:
5 – 7 years practical and professional experience in Information Security, Systems and Network design, Implementation and Operations.
Bachelor’s degree in Computer Science, Information Technology or a related discipline is desired. (Masters will be a plus)
Minimum Professional certifications is CISSP/ CISA/ CEH

Skills, Capabilities & Direct attributes 
•    Extensive knowledge of internet security issues and threat landscape
•    Must have solid working experience and knowledge of major Operating Systems and posses intermediate scripting knowledge.
•    Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills.
•    Ability to estimate, plan, lead and execute complex technical projects
•    Technical knowledge of information security concepts and technologies.
•    Possess a strong technology background with the ability to challenge or validate technology decisions from a position of knowledge and experience
•    Strength in both business and technical requirements analysis
•    Possess the ability to rapidly assimilate business strategies, coupled with the insight to seize high impact opportunities by applying creative problem-solving solutions
•    Demonstrated knowledge and hands-on experience in four or more of the following areas:
•    Network segmentation and isolation techniques and strategies, Remote access methods and technologies, Identity and Access Management (e.g., Active Directory, two-factor authentication, etc.), Encryption methods and technologies (data at rest and in transit), Public Key Infrastructure, Network (wired and wireless) Security, Intrusion Detection (within and from outside the perimeter), Mobile Device Management, Denial of service mitigation strategies and supporting technologies, Patch Management strategies and supporting technologies, Network and Host Firewalls, Disaster Recover Management, Risk Management, Business Continuity and Security incident and event management.
•    Member of security bodies such as NIST, ISACA, ISC2, SANS, etc.