World Bank Group Looking for Senior IT Assistant, Security, Risk and Compliance at Chennai, Tamil Nadu Full Time

Job #: req18540

Organization: World Bank

Sector: Information Technology

Grade: GD

Term Duration: 3 years 0 months

Recruitment Type: Local Recruitment

Location: Chennai,India

Required Language(s): English

Preferred Language(s):
Closing Date: 8/9/2022 (MM/DD/YYYY) at 11:59pm UTC

Description

Do you want to build a career that is truly worthwhile? Working at the World Bank provides a unique opportunity for you to help our clients solve their greatest development challenges. The World Bank consists of two entities – the International Bank for Reconstruction and Development (IBRD) and the International Development Association (IDA). It is a global development cooperative owned by 189 member countries. As the largest development bank in the world, the World Bank provides loans, guarantees, risk management products, and advisory services to middle-income and creditworthy low-income countries, and coordinates responses to regional and global challenges. Visit www.worldbank.org.

ITS Vice Presidency Context:
Information and Technology Solutions (ITS) enables the WBG to achieve its mission of ending extreme poverty and promote shared prosperity in a sustainable way by delivering transformative information and technologies to its staff working in over 150 locations.

Our vision is to transform how the Bank Group accomplishes its mission through information and technology. In this fast-paced, ever-changing world, the formulation and implementation of the ITS strategy is an ongoing, iterative process of learning and adaptation developed through extensive consultations with business partners throughout the World Bank Group.

ITS shapes its strategy in response to changing business priorities and leverages new technologies to achieve three high-level business outcomes: business enablement, by providing Bank Group units with innovative digital tools and technologies to transform how they deliver value for their clients; empowerment & effectiveness, by ensuring that all Bank Group staff are connected, able to find information, and productive to accelerate the delivery of development solutions globally; and resilience, by equipping the Bank Group to provide risk-based cybersecurity and robust data protection for a global network and a growing cloud platform.

Implementation of the strategy is guided by three core principles. The first is to deliver solutions for business partners that are customer-centric, innovative, and transformative. The second is to provide the Bank Group with value for money with selective and standard technologies. The third principle is to excel at the basics by providing a high performing, robust, and resilient IT environment for the organization.

Unit Context

The ITS Information Security and Risk Management (ITSSR) unit, headed by the Chief Information Security Officer (CISO), is responsible for providing leadership in managing the functions and activities of information security and risk across the World Bank Group, enabling the achievement of WBG’s business objectives. ITSSR enables and facilitates a risk aware culture, ensures that WBG information assets are protected in an effective, efficient, and balanced manner; and IT security and risk management efforts throughout the World Bank Group are coordinated and aligned to the Bank’s business and IT strategy. ITSSR establishes and maintains the World Bank Group’s IT and InfoSec policies and standards; develops and engineers the WBG’s information security plans and solutions; responds to security incidents; and ensures that the information risks are identified, assessed, and managed in consistent with the overall risk management approach and with the established appetite and tolerance.

Duties and Accountabilities:
ITSIS is seeking to fill a vacant Senior IT Assistant, Security, Risk and Compliance position within the ISOC. The successful candidate will be responsible for incident response, research and report writing. The individual should be multi-disciplined and comfortable in operating and maintaining secured solutions for platforms running mission critical business applications in a homogeneous environment, at the enterprise level.

Scope of Work

Security Incident Response

• Provide Information Security Operations Center (ISOC) support on a 24x7x365 basis by shift work with rotation.
• Review information security alerts from various sources and based on the classification and its impact would prioritize the alerts and assign to the respective teams within Information Security Office.
• Conduct thorough investigative actions based on security events and remediate as dictated by standard operating procedures.
• Participate in all the phases of security incident response process, including detection, containment, eradication, and post-incident reporting.
• Record detailed Security Incident Response activities in the Case Management System.
• Use Security information and event management (SIEM) capabilities to develop alerts to detect anomalies.
• Assist in developing and setting up frameworks for developing Security incident response.
• Assist developing and maintaining ISMS procedures (related to ISOC) for complying with global ISMS policy defined by the organization.
• Maintain technical proficiency in information security concepts and related technologies through on the job training, performing individual research and attending training courses as necessary.
• Undertake knowledge sharing and training activities on various monitoring tools and remediation techniques on periodic basis.
• Experience in threat hunting in a diverse log and tool environment.
• Develop periodic status reports and monthly metrics for reporting purposes.
• Support R&D lab using virtual machines and monitor open source security research news, contribute to control testing and strengthening.
• Perform detailed analysis of attacks against web infrastructure. This includes identification of malicious code within URLs, collection of malicious plugins and/or exploits’ payload. Able to identify exploit and exploit tools involved in attacks. Able to identify packing techniques used to obfuscate URLs. Able to look at return traffic from exploitation activity looking for successful exploitation.

Selection Criteria

• Bachelor’s degree with a minimum of 3 years relevant experience.
• Minimum 3 years of Information Security experience required with majority of time in a SOC.
• Understanding of how operating systems work and how malware exploits them.
• Understanding of network traffic and be able to analyze network traffic from an Incident Response perspective.
• Knowledge of common hacking tools and techniques.
• Familiar with Cloud security and various security tools like AWS Guard Duty etc.
• Project tracking and reporting skills.
• Experience in understanding and analyzing various log formats from various sources.
• Experience in analyzing reports generated of SIM/SEM tools, from incident perspective.
• Good communication skills (Verbal and Written)

Proficient experience with the following concepts and related toolsets:

oNetwork sniffers

oProcess analysis tools

oRegistry analysis tools

Preferred Skillsets

• CEH, Security++
• Experience in Incident Response, remediation, Malware analysis, Scripting Languages e.g. Python

Competencies

• Client Understanding and Advising – Looks at issues from the client’s perspective and takes action beyond normal expectations to ensure client satisfaction.
• Learning Orientation – Stays abreast of new trends and developments in own specialty area, the broader industry, and exposes self to increasingly more challenging projects and opportunities to learn.
• Compliance with Standards – Monitors and maintains records on requests for information and assistance.
• Knowledge of Emerging Technology – Tests new technology to evaluate capability compared to specifications.

World Bank Group Core Competencies

The World Bank Group offers comprehensive benefits, including a retirement plan; medical, life and disability insurance; and paid leave, including parental leave, as well as reasonable accommodations for individuals with disabilities.

We are proud to be an equal opportunity and inclusive employer with a dedicated and committed workforce, and do not discriminate based on gender, gender identity, religion, race, ethnicity, sexual orientation, or disability.

Learn more about working at the World Bank and IFC, including our values and inspiring stories.