Description
Violations Manager (information security)
Role Description - Violations Manager
The purpose of the Violations Manager is to ensure that preventative and detective SoD controls are in place and operational for all systems included in the scope of the Application Access Controls project, which spans the Investment, Private, Corporate and Retail Banking systems.
Key responsibilities
- To review the daily SoD report to assess any violations that have occurred
- To develop subject matter expertise in the SoD rules and the applications under management - and to act as this subject matter expert for issues and questions from teams within and outside of GIS
- To analyse the daily feed statuses and understand the impact of those of the SoD report
- To work with the relevant individuals and teams to carry out root cause analysis and incident management
- To ensure that the violations are managed and removed from the underlying applications
- To work with the OneCert on boarding team to ensure that changes to existing application and new application profiles are analysed with a full impact understood - and to assist the project and application teams in profile on boarding
- To work with the AAC project team to ensure that new SoD rules are understood and on boarded smoothly
- To prepare daily reports of violations for the PPOCS
- To identify any opportunities for improvement in the SoD management application and to work with the analysis and development teams to ensure that changes are made
Role Essentials
- Strong communication skills and an ability to communicate at all levels within an organisation
- Strong interpersonal skills and proven ability to influence outside of their direct line
- Ability to understand complex data sets and report them in a form which can be understood and actioned
- Ability to work under pressure and to tight deadlines
- Good facilitation skills - and an ability to bring diverse teams together to work to solve a common problem
- Experience of working with globally distributed teams