Security Analyst

The Security Analyst function protects the bank's information assets through continuous monitoring, incident response, threat detection, and control validation. It translates security policies into operational controls, manages vulnerabilities, performs threat hunting, and oversees attack surface management. The function also supports threat intelligence sharing and ensures alignment with regulatory requirements.

Duties and Responsibilities:

Monitoring & Detection

• Monitor dashboards for asset inventory, user behavior, and unauthorized changes.
• Triage SIEM alerts and follow established playbooks for escalation.

Policy & Documentation Support

• Assist in version control and review of infosec policies, procedures, and awareness materials.
• Maintain tracking for policy updates and training compliance.

Third-Party & Firewall Review

• Maintain onboarding checklist for outsourced providers using BSP outsourcing criteria.
• Track and verify firewall rule changes and coordinate reviews with infrastructure teams.

API, Cloud & System Logging

• Gather logs from APIs, cloud IAM systems, and backend services to support security investigations.
• Monitor cloud activity for signs of abnormal access or misconfiguration.

AppSec & KYC Support

• Perform baseline scans for lower-risk apps and assist in fixing findings with developers.
• Monitor onboarding and KYC behavior for fraud or identity anomalies.

Coordination & Reporting

• Coordinate interviews during incident investigations, gather audit evidence, and maintain compliance

reports.

• Track patch statuses, configuration changes, and alert resolutions across teams.
• Other tasks as assigned by the immediate superior.