The Cybersecurity Analyst supports the Cyber Security Unit in protecting the Bank’s computer systems and digital infrastructure from cyber threats and attacks. They play a crucial role in safeguarding the Bank’s sensitive data and ensuring the integrity, confidentiality, and availability of information through.
Design of secure applications and systems: by integrating security practices into the Bank’s software development lifecycle (SDLC) including implementation of appropriate tools.
Implementing effective security measures: such as setting up multi-factor authentication, access controls, and network security, mobile device and mobile application management and threat protection programs.
Data protection: Implementing data protection measures such encryption for data at rest and in transit, data labelling, data classification and data loss prevention (DLP) tools.
Identity and access management (IAM): Implementing effective measures for user life cycle management, secure access to systems, ensuring least privilege, and Privileged Access Management (PAM).
Security Monitoring and Analysis: Continuously monitor security systems, analyze security breaches, and take corrective actions as required.
Vulnerability Management: Implementing vulnerability management solutions to proactively identify exploitable vulnerabilities by performing regular vulnerability assessments and supporting deployment of patches or fixes to remediate risks.
Research and development: Staying updated on the latest threats and security trends including evaluating new tools and technologies to improve security.
Documentation: Maintaining detailed documentation of security operations, assessment reports, and corrective actions taken.
Collaboration: Work closely with IT teams, the Business, management, and external partners to ensure comprehensive protection of the Bank’s assets.
Application Close Date
2026-09-07
Engagement Type
Individual Consultant
Job Family
15.Information Management Technology
A. Background Objectives
The Cybersecurity Analyst supports the Cyber Security Unit in protecting the Bank’s computer systems and digital infrastructure from cyber threats and attacks. They play a crucial role in safeguarding the Bank’s sensitive data and ensuring the integrity, confidentiality, and availability of information through. • Design of secure applications and systems: by integrating security practices into the Bank’s software development lifecycle (SDLC) including implementation of appropriate tools. • Implementing effective security measures: such as setting up multi-factor authentication, access controls, and network security, mobile device and mobile application management and threat protection programs. • Data protection: Implementing data protection measures such encryption for data at rest and in transit, data labelling, data classification and data loss prevention (DLP) tools. • Identity and access management (IAM): Implementing effective measures for user life cycle management, secure access to systems, ensuring least privilege, and Privileged Access Management (PAM). • Security Monitoring and Analysis: Continuously monitor security systems, analyze security breaches, and take corrective actions as required. • Vulnerability Management: Implementing vulnerability management solutions to proactively identify exploitable vulnerabilities by performing regular vulnerability assessments and supporting deployment of patches or fixes to remediate risks. • Research and development: Staying updated on the latest threats and security trends including evaluating new tools and technologies to improve security. • Documentation: Maintaining detailed documentation of security operations, assessment reports, and corrective actions taken. • Collaboration: Work closely with IT teams, the Business, management, and external partners to ensure comprehensive protection of the Bank’s assets.
B. Scope of work
Under the supervision of the Chief Cybersecurity Analyst, the Cybersecurity Analyst will carry out the following functions: 1. Support the implementation and operations of effective DevSecOps practices including effective Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA) and Infrastructure as Code analysis (IaC) in the Bank’s software development lifecycle. 2. Cybersecurity resilience assessments and attack path mapping to determine the Bank’s potential vulnerabilities, ability to detect, respond and recover from cybersecurity incidents and advise accordingly on improvements in incident response, threat detection and reporting including supporting execution of remediation strategies 3. Support the implementation and operations of the cybersecurity capabilities that include Endpoint Detection and Response (EDR), Identity Based Detection, Mobile Device and Mobile Application Management and Security Incidents and Events Monitoring (SIEM) and any other applicable solutions 4. Support the Implementation of key initiatives such as Information & Data Protection, Identity & Access Management, Risk Based Vulnerability Management, Next Generation Firewalls, and Threat Intelligence 5. Being an integral part of IT security tasks & projects including technical protection testing and implementations, participating in market reviews and product evaluation of tools to enhance the Bank’s security posture against existing and emerging threats 6. Develop scripts or automation to enhance security monitoring and response, including regular assessments and security testing 7. Supporting daily operations of the Banks cybersecurity measures and technologies and perform testing and assisting with implementation of measures to decrease user rights risk profiles as necessary while maintaining productivity.
C. Deliverables Expected
Implement and support DevSecOps security testing capabilities, including SAST, DAST, SCA, and IaC analysis. Conduct cybersecurity resilience assessments, vulnerability analyses, and support remediation initiatives. Support the operation and optimization of cybersecurity monitoring and detection platforms, including EDR, IAM, mobile security, and SIEM solutions. Assist in the implementation of strategic cybersecurity initiatives covering data protection, identity management, firewall security, threat intelligence, and vulnerability management. Participate in security assessments, penetration testing activities, and cybersecurity technology evaluations. Develop automation scripts and workflows to improve security monitoring, reporting, and incident response processes. Provide operational support for cybersecurity technologies, controls, and security administration activities.
D. Duration and Timetable for the Assignment
The duration of services is (12) months, from the date of signing the contract.
E. Bank Contribution and Institutional Arrangement
The Bank will provide the Consultant with all relevant documentation necessary for the execution of the assignment, including but not limited to: business requirements, technical documents, project-related information.
The Bank will also provide access to office premises, IT systems, tools, and relevant Bank platforms.
F. Duty Station
The work will be carried out onsite at the Bank's headquarters in Abidjan, Cote d’Ivoire.
G. Essential Specialized Skills/Knowledge/Competencies
• Minimum of a master’s degree in information security, Computer Science, Information Technology or related discipline. • Experience: 2+ years’ experience supporting, troubleshooting, and administering a variety of networks, OSs, and applications including 3 years of experience in cyber security • Be less than 32 years old • Relevant certifications such as CISSP, CISM, CEH, or CompTIA Security+ are highly desirable. • Proficiency with security tools and technologies, such as firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM, and endpoint protection platforms. Familiarity with network protocols, operating systems, and scripting languages. • Strong analytical and problem-solving abilities, with attention to detail and a proactive approach to identifying and addressing security threats. • Strong knowledge of encryption, authentication, authorization, and access control mechanisms • Strong Understanding of cloud security (AWS, Azure, GCP security tools). • Strong Knowledge of secure coding practices, frameworks and tools (e.g. OWASP Top 10, SAST and DAST Tools). • Strong grasp of programming & Scripting languages Python, Bash, PowerShell for automation of security tasks. • Excellent written and verbal communication skills, with the ability to effectively convey complex security concepts to non-technical stakeholders • Fluent in English or French • Team Player: Ability to work collaboratively within a team environment and manage multiple tasks simultaneously.
H. Supervisor
The analyst will report to the Division Manager, Cybersecurity division.
Consultancy Input Days
129.00
Qualifications
Qualification
Assessment
Regular Consultant
Less than 32 years old at the time of signing the contract and during contract execution
