Tirane, Information Security Specialist

[FONT=&quot]Ref Job number: # 002 ISO #
Job Title: Information Security Specialist[/FONT]
[FONT=&quot]Location: Tirana
Division: Information Security Sector [/FONT]
[FONT=&quot]Closing Date: 07/11/2014[/FONT]
[FONT=&quot]
[/FONT]
[FONT=&quot]Credit Agricole Albania Bank S.A.,[/FONT][FONT=&quot] Crédit Agricole Group, a market leader in universal customer-focused banking in France and one of the largest banks in Europe seeks to serve the real economy by supporting its clients’ projects in all areas of retail banking and associated specialized business lines.
Emphasizing its values and its commitment, we are the bank of common sense. It puts the satisfaction and the interests of its 54 million customers, 160,000 employees, 1.2 million shareholders and 6.5 million mutual shareholders, at the heart of its activities.
[/FONT]
[FONT=&quot]
[/FONT]
[FONT=&quot]We are seeking to recruit[/FONT][FONT=&quot]: Information Security Sector Specialist[/FONT]


[FONT=&quot]Direct Reports to[/FONT][FONT=&quot]: Head of Information Security Sector[/FONT]

[FONT=&quot]Job Purpose:[/FONT][FONT=&quot]The Information Security Sector Specialist is responsible for the control process, monitoring process, change management process, risk assessment for different projects, security configuration reviews (IPS, firewall, domain, vmware, backup), Access right process, Risk Assessment methodology, Security Trainings for the employees, BCP support, Gap analysis, Patch management, vulnerability mitigation process, penetration tests, incident follow up process, information classification project, different daily tasks[/FONT]


[FONT=&quot]Main Responsibilities:[/FONT]

[FONT=&quot]Network security[/FONT]
· [FONT=&quot]Perimeter protection – define the measures and baselines[/FONT]
· [FONT=&quot]Fire Wall protection (internal and external), rules analysis, approval, and continuous monitoring[/FONT]
· [FONT=&quot]Intrusion Prevention protection (internal and external), rules analysis, approval, and continuous monitoring[/FONT]
· [FONT=&quot]Device protection following secure configuration principles[/FONT]
· [FONT=&quot]Analyse the new technologies in network security (encryption, layer 2 protection, IPS IDS etc) [/FONT]
· [FONT=&quot]Create and execute the control plan to insure the required level of security[/FONT]
· [FONT=&quot]Continuous Monitoring of the entity network[/FONT]

[FONT=&quot]Systems Security[/FONT]
· [FONT=&quot]Define and concept the baseline security on all systems[/FONT]
· [FONT=&quot]Check the Log Management Systems, for log retention, reviews, and analysis[/FONT]
· [FONT=&quot]Review and analysis the needs for security protection on different systems (domain security etc)[/FONT]
· [FONT=&quot]Ensure proper vulnerability management process [/FONT]
· [FONT=&quot]Ensure proper Penetration tests process[/FONT]
· [FONT=&quot]Ensure proper Patch management process [/FONT]
· [FONT=&quot]Review the backup plan on systems and DR measures[/FONT]
· [FONT=&quot]Ensure proper Endpoint (Workstation) protection[/FONT]
· [FONT=&quot]Propose and Control implementation of proper security measures for workstations in the Bank[/FONT]
· [FONT=&quot]Perform regulatory controls based on the Year control plan[/FONT]
· [FONT=&quot]Develop and maintains procedures based on the Information Security Policies[/FONT]
· [FONT=&quot]Ensures and monitors compliance with Information Security Policy, procedures and guidelines.[/FONT]
· [FONT=&quot]Undertakes a continuous Risk Assessment process over bank network and other systems[/FONT]
· [FONT=&quot]Review and analyses the data leak prevention/protection mechanisms [/FONT]
· [FONT=&quot]Ensure if proper controls are in place for protection of mobile devices (laptop encryption etc)[/FONT]
· [FONT=&quot]Ensure that the incident management process is handled properly over the network and system level. [/FONT]
· [FONT=&quot]Investigate for security breaches.[/FONT]
· [FONT=&quot]Insure proper implementation of local and group standards in the entity network and systems [/FONT]
· [FONT=&quot]Keep watch over potential new threats and risks[/FONT]
· [FONT=&quot]Preparing reports by use monitoring tools [/FONT]
· [FONT=&quot]Contribute on the Business Continuity and Disaster Recovery Plan [/FONT]
· [FONT=&quot]Contribute on Keeping the Plan Up-to-date[/FONT]
· [FONT=&quot]Contribute on BCP yearly test process[/FONT]
[FONT=&quot]The ideal Candidate should have: [/FONT]
· [FONT=&quot]Good analytical and problem-solving skills[/FONT]
· [FONT=&quot]Good investigation skills[/FONT]
· [FONT=&quot]Good written and oral communication skills [/FONT]
· [FONT=&quot]Ability to multi-task in a fast-paced environment[/FONT]
· [FONT=&quot]Ability to work independently.[/FONT]
· [FONT=&quot]Must be able to prioritize and meet deadlines.[/FONT]

[FONT=&quot]
Criteria to be fulfilled:[/FONT]
· [FONT=&quot]University degree in Computer Science, Electronic Engineering, or related fields.[/FONT]
· [FONT=&quot]5 years of Experience as a network and domain administrator.[/FONT]
· [FONT=&quot]Experience in networking Management (LAN/WAN), firewalls, IPS, virus detection, VMware.[/FONT]
· [FONT=&quot]Good knowledge on Network Monitoring systems.[/FONT]
· [FONT=&quot]Knowledge of Penetration and Vulnerability detection systems.[/FONT]
· [FONT=&quot]English (written/oral).[/FONT]
[FONT=&quot]
[/FONT]
How to apply:

Strong motivated candidates looking for a dynamic job and professional team are welcomed to apply by following these steps:

1- Properly fill our standard application form available to be downloaded. We kindly advise to carefully fill all required info and obligatory fields. For downloading the application form, please click here.
2- Submit the completed application form by sending it only through this e-mail address jobapplication@credit-agricole.al
3- In the e-mail subject please specify clearly the position reference number.

Please note that only shortlisted candidates will be further contacted from our HR specialists.

[FONT=&quot].[/FONT]

[FONT=&quot]Publication date: 24/10/2014[/FONT]