Shaikh Tariqul Islam

1. IT Security Operations & Monitoring Monitor and manage security events through SOC (Security Operations Center). Implement and manage Network Access Control (NAC) and Network Detection & Response (NDR) solutions. Maintain and administer Privileged Access Management (PAM) systems to ensure secure access control. Manage firewall configurations and ensure compliance with security policies. Conduct configuration reviews of critical systems, servers, and network devices. 2. Security Audit & Assessment Conduct Vulnerability Assessment and Penetration Testing (VAPT) and follow up on remediation. Perform ISO 27001 / ITGC / SWIFT and regulatory audits as per central bank or internal guidelines. Use tools such as AD Audit Plus and Oracle Database Audit Vault for log analysis and monitoring. Perform User Access Reviews across core banking, network, and critical applications. Support SWIFT environment security and compliance audits. 3. Compliance & Risk Management Ensure compliance with Bangladesh Bank, PCI DSS, and ISO 27001 standards. Assist in conducting Security Risk Assessments and prepare mitigation plans. Support internal and external auditors with evidence and documentation. Prepare periodic IT Security reports for management and the Board. 4. Governance & Reporting Assist in Information Security Policy and Standard Operating Procedure (SOP) development and updates. Prepare security posture and audit summary reports for the Board Meeting (via Zoom/online). Document audit findings, recommend corrective actions, and track remediation progress. Maintain audit trails and records in line with compliance and retention policies. 5. IT Audit & Review Activities Conduct Configuration and Change Management Reviews. Perform Application Controls, Database Audits, and System Log Reviews. Assess effectiveness of IT controls in business continuity, backup, and DR environments. Verify implementation of security patches and software updates.