VFD Microfinance Bank Limited (VFD MFB) is a technology-driven financial institution in Nigeria committed to providing accessible, innovative, and customer-focused financial solutions. The Bank offers a range of financial services, including savings and deposit products, loans, payments, and other banking solutions tailored to meet the needs of individuals, small and medium-sized businesses, and corporate customers.
We are recruiting to fill the position below:
Job Title: Security Engineering Assurance Analyst
Location: Lagos Island, Lagos Employment Type: Full-time
Key Responsibilities
Conduct security assessments and reviews of IT infrastructure, systems, applications and technology solutions to identify security weaknesses and control gaps.
Perform vulnerability assessments, security testing and configuration reviews to identify potential threats and recommend appropriate remediation measures.
Review system architectures, infrastructure configurations and technology implementations to ensure compliance with established security requirements.
Support the implementation, configuration and maintenance of security controls across the Bank's IT environment.
Monitor security vulnerabilities, assess their potential impact and coordinate remediation activities with relevant technology teams.
Conduct periodic security reviews of servers, networks, endpoints, databases and other critical technology assets.
Support the implementation and monitoring of security solutions, including endpoint protection, intrusion detection and prevention systems, firewalls and access control mechanisms.
Review and validate security configurations, system hardening standards and access management controls to minimise exposure to cyber threats.
Participate in security testing and assurance activities for new systems, applications, infrastructure changes and technology deployments.
Monitor security logs, alerts and events to identify suspicious activities, potential breaches and control failures, escalating incidents where necessary.
Support cybersecurity incident investigations by providing technical analysis, evidence gathering and recommendations for containment and remediation.
Conduct periodic reviews of user access privileges and privileged accounts to ensure appropriate access restrictions and segregation of duties.
Maintain security assessment reports, vulnerability registers, remediation trackers and other relevant security documentation.
Collaborate with Application Security, Infrastructure, Network, IT Operations, Risk Management and other relevant teams to address security gaps.
Support the development, review and implementation of security policies, procedures, technical standards and operational guidelines.
Ensure that security controls are aligned with applicable regulatory requirements, industry standards and internal policies.
Conduct security awareness and provide technical guidance to relevant teams on secure technology practices.
Keep abreast of emerging cybersecurity threats, vulnerabilities, technologies and industry developments to strengthen the Bank's security posture.
Key Performance Indicators (KPIs)
Number of security assessments completed within agreed timelines.
Percentage of identified vulnerabilities remediated within stipulated timelines.
Reduction in recurring security vulnerabilities and configuration weaknesses.
Compliance rate with security configuration and hardening standards.
Timely completion of access control and privileged account reviews.
Timely identification, escalation, and resolution of security incidents.
Compliance with internal security policies and regulatory requirements.
Accuracy and timeliness of security assurance reports and documentation.
Qualifications
Candidates should possess a Bachelor's Degree with 4 years' experience.