Information Security Clerk

Bank of Jordan, a leading financial institution in Jordan, is seeking a detail-oriented and highly organized Information Security Clerk to join our team. As an Information Security Clerk, you will play a pivotal role in supporting the bank's information security initiatives and ensuring the confidentiality, integrity, and availability of our systems and data.

At Bank of Jordan, we prioritize the protection of our customers' sensitive information and the prevention of cyber threats. As an Information Security Clerk, your responsibilities will include monitoring security systems, responding to security incidents, conducting security assessments, and implementing security controls. If you have a passion for information security, strong analytical skills, and a desire to contribute to the continued success of Bank of Jordan, we invite you to apply for this position.

1. Monitor and review employee usage of bank systems, applications, and network via the SOC (Security Operations Center), prepare related reports, and submit them to relevant stakeholders to maintain robust information control. Compare logs of changes made in production systems with reports from the IT department to verify accuracy.
2. Review internet usage reports to ensure compliance with internet usage policies and monitor firewall rules for internet access.
3. Analyze monthly vulnerability assessment reports for core systems, databases, and communication devices, following up on identified issues with the IT department.
4. Monitor the status of computers and servers to ensure effective antivirus protection and absence of malicious files, coordinating with relevant parties for regular inspections.
5. Track lists of resigned/transferred employees and ensure the proper deactivation or adjustment of their system access permissions.
6. Review the bank's information security policy and participate in developing implementation procedures to minimize risks and ensure alignment with the bank's general policies.
7. Contribute to issuing awareness bulletins on information security, proper internet usage, and computer hygiene.
8. Review and update the Business Continuity and Crisis Management Plan monthly and ensure employees understand and fulfill their roles via regular assessments.
9. Prepare daily, weekly, and monthly reports on the monitoring of servers and network devices.
10. Research and propose new methods to identify security vulnerabilities and enhance incident reporting and response procedures.
11. Review email usage reports to ensure compliance with the bank's information security policy and prevent data leakage.
12. Analyze reports related to the bank's website hosting and DDoS mitigation services, and follow up with relevant entities in case of incidents.
13. Regularly review access privileges and administrative rights of users on critical banking systems and ensure they match formally approved access levels.
14. Serve as a core or backup team member in the officially approved Business Continuity and Emergency Response plans, fulfilling all assigned duties to minimize the impact of crises and restore operations swiftly.
15. Monitor the bank's compliance with approved information security policies and procedures, contribute to the development of the security governance framework, and provide necessary recommendations.
16. Ensure the bank's compliance with regulations and directives issued by the Central Bank of Jordan (CBJ) and other regulatory authorities (e.g., CBJ, SAMA).
17. Ensure that implemented security controls are aligned with international standards such as ISO 27001, PCI DSS, and COBIT, and participate in internal and external audit preparations by providing the required evidence to auditors.
18. Review and regularly update information security policies and procedures to reflect technological and organizational changes, and document the corresponding operational procedures accordingly.

• Bachelor's degree in computer science, information technology, or a related field.
• Entry-level position; requires a minimum of 6 months of hands-on training in a similar role.
• Strong knowledge of information security principles, technologies, and best practices.
• Proficient in using security tools and software, such as firewall, antivirus, and intrusion detection systems.
• Understanding of network protocols, operating systems, and cyber threat landscape.
• Ability to analyze and interpret security logs, access logs, and other security-related data.
• Excellent attention to detail and strong analytical skills.
• Effective communication and interpersonal skills.
• Ability to work independently and collaboratively as part of a team.
• Relevant industry certifications, such as CompTIA Security+, CISSP, or CISM, will be considered an asset.