Role Summary:
The IT Risk Team is looking for a IT Risk CERT Analyst to join their team.
The Role Involves:
• Coordination and handling of security incidents (cases) with regional scope
• Coordination and handling of internal digital forensic investigations.
• Customer relationship management for regional entities (stakeholders and suppliers)
• Definition and regional enforcement of mitigation actions
• Service strategy, documentation, development and reporting
• Definition of service KPIs
• Escalation / information about critical cases
• Responsible for regional CERT cases within the different services, for analyzing, prioritizing, reporting and coordinating activities
• Tracking of security incidents (cases)
• Tracking of regional mitigation actions
• CERT Analysts assigned to security incidents (cases)
To Qualify, You Must Possess:

Education and Professional Qualifications

Essential
• Undergraduate degree in Information Technology

Desirable
• CISSP certification
• CISA certification
• Formal training in digital forensics and/or IT investigations


Work Experience

Essential
• 3 years experience in the international financial services industry
• At least 3 years of experience in Information Risk and Security Management
• Strong IT background, based on at least 5 years experience

Desirable
• Prior experience working on a Security Incident Response team.
• Knowledge in using security incident response tools (commercial and open-source).
• Experience in Malware and Rootkits discovery and analysis


Technical/Business Skills and Knowledge

Essential
• MS office tools
• EnCase
• Computer investigations and forensic software
• TCP/IP
Desirable
• Knowledge in writing scripts in programming languages such as Python, Ruby, and Perl
• Background as an application developer, database, system, or network administrator
• Penetration testing tools experience such as Core Impact, Canvas, and Metasploit
• Knowledge in using debuggers/diassemblers such as Olydbg, Immunity Debugger, Windebug, and IDApro.
• Knowledge in Microsoft Windows FAT/FAT32/NTFS filesystem
• Memory dump analysis tools such as Volatility framework, and Memoryze.
• Command line forensics power tools such as DD, netcat, grep, awk, and TSK binaries.
• Network analysis experience using TCPdump, wireshark, and Netwitness
• Mobile devices forensics in tools such as Paraben's Device Seizure.
• Knowledge in Department-of -justice procedures for the acquisition of evidence.

See Job Description

Company Profile:
As one of the world's leading banks, Credit Suisse provides its clients with investment banking, private banking and asset management services worldwide. Founded in 1856, Credit Suisse has a long tradition of meeting the complex financial needs of a wide range of clients, offering advisory services, comprehensive solutions and innovative products to companies, institutional clients and high-net-worth private clients globally. Credit Suisse is active in over 50 countries and employs approximately 46,000 people. Further information can be found at www.credit-suisse.com.

Cultural diversity is essential to our success. As such, we employ people from more than 100 countries. Credit Suisse empowers employees to work openly and respectfully with each other and with clients, ultimately striving to deliver superior results while offering initiatives and programs to assist employees achieve a healthy work-life balance.

Right place, perfect opportunity
www.credit-suisse.com/careers

Credit Suisse is an Equal Opportunity Employer and does not discriminate in its employment decisions on the basis of any protected category.

To the extent permitted or required by applicable law, a candidate who is offered employment will be subject to a criminal record check and other background checks before the appointment is confirmed.