Senior Business Analyst Standard III

 DUTIES AND ACCOUNTIBILITIES Below are the set of expected tasks to be performed: • Review access logs generated by automated monitoring tools (Splunk and Tripwire), and report anomalies within the operating system, database, network and application layers based on Bank's Information Security policies, procedures and internal/external audit requirements. • Log incidents into Information Security Incident Management System and assist in incident response and resolution. • Accredit monitoring rules and templates set up in tools such as Splunk, Tripwire to comply with Bank's technical security standards. • Perform continuous monitoring processes to assess compliance with information security policies, and standards. • Identify process enhancement opportunities with control owners to develop risk-based action plans while understanding their operational constraints/challenges. Perform other duties in the compliance work program, as assigned. • Collect, evaluate, and maintain data to ensure that required management reporting is completed as needed (this also includes inputting appropriate data into systems such as RSAM & Bwise) • Perform other duties in the compliance work program, as assigned 2. SKILLS / EXPERIENCE REQUIRED The desired resource should possess expert level competency in their own field. In addition to this, following should also be considered as part of the profile: • 2+ years of experience working in a compliance monitoring role in the areas of information security, information technology, or emerging technologies • Hands on experience in reviewing access logs, understanding and monitoring of IT control performance, and follow-up for resolution • Experience on working with large sets of data, performing detailed analysis, identifying false positives, and other data debugging activities • Good understanding of industry standards and regulations including COBIT, COSO, and SOX • Demonstrates an analytical mindset, and problem-solving a