Head of Section, IT Security Services

**Who we are**

**Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.**

**Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office)” for Crédit Agricole CIB's worldwide business **. We work daily with international branches located in 30 markets by:

- Envisioning and preparing the Bank’s futures information systems
- Partnering and supporting core banking flagships and transverse areas in their large scale development projects.

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

**ISAP/ITS Department Overview**

**ISAP IT Production Centre **is an offshore delivery center managing IT Operations (RUN) for Paris, London and Asia. With over 250 people, it constitutes one of two main hubs for CA-CIB IT production teams. This setup is operated in partnership with a Service Provider, who provides most resources on site.

ISAP IT Production Centre is split in **4 departments **covering the following aspects:

- **INFRA**: core infrastructure
- systems and network services
- **Middleware**: Data services and Middleware services
- **End-user & Transverse**: End-user Services and Transversal activities, including Control Tower, Global Operations Center and Data Security Services.

**Position**

The Head of Section for Data Security Services **manages the RUN team **and the related activities to data and endpoint security. He/She is the **main point of contact for the service provider **and the internal clients in the bank. He/She **manages the budget **for the scope. He/She is also **responsible for the transition of the new services **from other regions to Singapore and manages the project/transition. The role is a **techno-managerial **role and will have to be **involved in DLP policy/rule modifications **as well. He/She works with continuous improvement principles. He/She is equivalent to the **Subject Matter Expert on the technologies **within data and endpoint security.

**Data Security Services **team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France, UK, and Russia) remotely from Singapore. France infrastructure represents approximately 90% of the worldwide production activities of CA-CIB.

Team works in **Asia and Europe time **zones and flexible rotational shift is based on the nature of duties.

The **operational support of the team **covers the following technical scope:

- Endpoint Security technologies - Anti-virus management, Host Intrusion Prevention System etc.
- Encryption Solutions: Disk Encryption, File and Folder encryption,
- Database Audit Monitoring solutions
- Vulnerability Management
- Idendiity Access Management

**Detailed Job Responsibilities**

The Manager has a wide spectrum of responsibilities and actions.

As the manager of his/her team, he/she:

- assigns the tasks and manages delegation,
- sets and reviews the work organization according to activity’s requirements and people’s needs and validates the schedules,
- animates the team to encourage collaboration and sharing of practices,
- has a role in supporting people development,
- participates to recruitment process for the team,
- Vendor relation management

As the manager of his/her team, he/she:

- Meets stakeholders on a regular basis to discuss improvement plans, action plans, evolving threats and changing risks, and provide feedback on policies, standards, procedures, guidelines. ISS leads security for GIT and is the main entry point for internal clients outside of GIT (Business Lines, BCP, LGL, and Compliance for security topics).
- The service includes, but is not limited to, incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management, but also global projects like End of Life, New Builds, migrations and upgrades etc., participation in global Infra events (like Power down and DR Tests)
- ensures activity is performed in compliance with norms, standards, processes and procedures,
- gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting,
- Reporting and auditing
- monitors operational KPI and ensure tickets are closed within SLA,
- ensures documentation is up to date and relevant for use,
- implements cross-functions activities including continuous improvement initiatives,
- estimates the yearly budget, sets monthly forecasts and follows up BAU/Project monthly balance.

As an experienced professional in Security domain, he/she:

- supports his/her team or experts’