AEON Bank

Senior Officer, Information Security Asset Management

Supply ChainPosted 2 mo ago

Location

Head Office

Job Type

FULLTIME

Experience

2+ Years

Experience level

Associate

Work Mode

On-site

Industry

Banking

About the role

Discovering and maintaining an accurate, up-to-date inventory of all information assets includes hardware (servers, endpoints, net devices, IoT), software (applications, operating systems, licenses), data (databases, sensitive files, intellectual property), cloud resources, and even physical documents if they contain critical information.
Tracking asset locations, ownership, and current status.
Tracking the cybersecurity infrastructure budget and expense in monthly basic and regularly report to management.
Collaborating with risk management and vulnerability management teams to assess risks associated with each asset.
Collaborating with procurement and cybersecurity infrastructure for hardware, software and subscription asset renewal.
Identifying vulnerabilities (e.g., unpatched software, misconfigurations, end-of-life systems) and prioritizing remediation based on asset criticality.
Enforcing security policies and procedures related to asset use, storage, and disposal.
Managing assets from acquisition (ensuring security by design) through deployment, ongoing use, maintenance, and secure decommissioning/disposal.
Preparing for and supporting internal and external security audits.
Providing accurate asset information to aid in incident response and recovery efforts (knowing what was affected and its criticality).
Generating reports on asset inventory, security posture, compliance status, and risks to management and other stakeholders.
Communicating asset security policies and best practices to employees.

Requirements

Bachelor’s degree in computer science, Information Technology, or a related field. 2. 2+ years of experience in information security, compliance, or risk management. 3. Strong understanding of information security principles, concepts, and best practice

Required Skills

Computer ScienceInformation TechnologyInformation SecurityComplianceRisk ManagementInformation Security PrinciplesInformation Security ConceptsInformation Security Best Practices