Purpose of the role:
The Bank for International Settlements, BIS's mission is to support central banks' pursuit of monetary and financial stability through international cooperation, and to act as a bank for central banks. The Cybersecurity Operations (CSO) team plays a key role in this supporting this mission by fortifying the Bank’s cyber defence programme in incident response, vulnerability management, threat hunting and cloud security in our hybrid environment. We are currently looking for a Senior Security Specialist to be part of our successful CSO team. This role is based out of our Representative Office for Asia and the Pacific in Hong Kong SAR and reports directly to the Head of Cybersecurity Operations in Basel, Switzerland.
By joining the Corporate Security team:
- Our Asian Office is in the regional financial hub of Hong Kong SAR. By joining our office, you will be positioned in a key region of growth for the Bank while having the opportunity to work closely with your team Switzerland.
- You will join a group of security experts that invests continually in the development of specialist knowledge and skills with the aim of responding to the dynamic business needs of the BIS.
- We pride ourselves on being able to craft security solutions which are enablers for the ambition and innovation of the Bank's mission.
- We are a committed and engaging team that believes in a diversity of thought, meaning that we are open to new ideas and enjoy working with creative people.
- Our size means that your job won’t be narrow but will have the scope to demonstrate and develop expertise across the full range of security competencies, delivering the latest cloud security technologies in our hybrid Microsoft Azure environment.
Principal accountabilities:
As a member of the cyber security operations centre:
- Contribute to the cyber defence of our on-premises and cloud-based assets across the 5-NIST functions (identify, protect, detect, respond, and recover), including on-call duties
- Provide input to business areas on cybersecurity risk assessments
- Complete the Incident response plans and drive high severity incidents
- Support or lead advanced forensics activities and/or investigations
- Design and implement process automation for key controls and security assurance processes
- Support our vulnerability management programme
As a representative of Corporate Security in the Asian Office:
- Ensure liaison with Basel on physical security and business continuity matters
- Support security awareness activities for the Asian Office
- Lead technical security projects or represent the unit in related security projects
- Liaise with local IT support
Qualifications, skills, and experience:
- Relevant experience in cybersecurity operations, including exposure to incident response in complex environments and handling high severity incidents
- University degree (or equivalent professional/demonstrated expertise) in computer science, information security, information technology or related subject area
- Security industry certifications such as ISC2’s OSCP and CISSP, SANS’ GIAC/GCFA/GNFA/GREM, etc
- Cloud security certifications such as CCSP, and other public cloud certifications (Azure)
- Experience with conducting highly technical analysis and reporting of Cloud and on-premises security incidents
- Experience with network and host-based investigations using EDR solutions such as Defender for Endpoint, Carbon Black, or CASB solutions such as Microsoft for Cloud Apps
- Strong programming and scripting skills in languages such as PowerShell, Python, C#, Go or Java
- Solid experience with forensics tools such as Autopsy, Volatility, Wireshark and other VM distributions such as FLARE VM and REMnux
- Deep operating systems knowledge in both Windows and Linux
- Strong knowledge of adjacent technical security domains (e.g., Security testing, Identity & Access Management and Cloud Security)
- Familiarity with industry-recognized key critical controls (e.g., SANS, CIS or equivalent) and frameworks (e.g., NIST, MITRE ATT&CK)
- Good communication and presentation skills with proficiency in English
- Great teammate but technically autonomous
- Prior experience working in a SOC for a mid-to-large size organisation would be a plus but is not a must
Who we are:
The Bank for International Settlements is a diverse and inclusive organisation with colleagues from over 60 countries. By joining us in the international city of Basel, you will work in a unique, highly rewarding and international work environment. We truly value diversity and inclusion and want to reflect the world we serve. We want the best people to work for us in an inclusive environment so the applications are welcomed from all qualified candidates. We value equality and diversity in all its forms and one way we support diversity and inclusion is through our staff-run networks. You can discover more about diversity and inclusion at the BIS here .
What we offer:
In return, we offer a competitive compensation package, including a comprehensive set of expat and relocation benefits and allowances. In addition, thanks to our status as an international organization, we are able to hire globally and open to receive applications from candidates of all nationalities and located anywhere in the world.
|