Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank. We are looking for top-tier individuals who are passionate and hungry to add value from day one. Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow. We are looking for an Cybersecurity & Infrastructure Analyst.
Purpose of the role
The Cybersecurity & Infrastructure Analyst provides experienced, execution capacity across the Bank's infrastructure, cloud, and cybersecurity operations, operating within the strategy, standards, and direction set by the Cybersecurity & Infrastructure Lead. Drawing on significant hands-on experience, the role carries out day-to-day infrastructure administration, security monitoring, and operational activity across on-premise, hosted, and cloud environments - exercising sound, experience-based judgment to resolve matters directly where appropriate, and escalating those requiring further guidance or direction - in support of the Bank's infrastructure resilience and cybersecurity posture.
Responsibilities Infrastructure & Cloud Operations
- Support and administer the Bank's infrastructure estate across on-premise, hosted, and cloud environments, including networks, servers, storage, virtualization, and end-user computing.
- Carry out day-to-day administration of core infrastructure platforms, including server virtualization, directory and identity services, email and messaging systems, database systems, and enterprise backup and storage.
- Follow ITIL-aligned service management practices across infrastructure operations, covering incident, problem, and change management.
- Manage the Bank's help desk/service management system, ensuring it is used effectively and tickets are properly logged, progressed, and resolved.
Disaster Recovery & Business Continuity
- Manage infrastructure disaster recovery planning and exercises, conducting testing against defined recovery objectives.
- Administer data replication technologies supporting production and DR environments.
Cybersecurity
- Manage the Bank's day-to-day cybersecurity posture, including threat monitoring, incident response, vulnerability management, and risk mitigation activity.
- Manage the relationship with the Bank's Security Operations Center (SOC), coordinating monitoring, alerting, and incident escalation.
- Administer core security tooling, including email security and endpoint protection.
- Execute data loss prevention and information protection/classification controls in line with strategy and direction set by the Information Security function.
- Manage conditional access and endpoint security configuration for mobile and BYOD access.
- Manage cyber control activity supporting Risk, Compliance, and Internal Audit requirements.
Delivery & Escalation
- Carry out infrastructure and security changes in line with standards and processes set by the Cybersecurity & Infrastructure Lead, escalating decisions requiring sign-off or strategic direction.
- Provide senior delivery capacity across infrastructure and cybersecurity workstreams, ensuring continuity of operations at all times.
Vendor & Asset Support
- Manage day-to-day engagement with infrastructure and security vendors.
- Maintain IT hardware and software inventory and asset records.
Business Partnership
- Act as a senior point of contact for application teams, business stakeholders, and Information Security on infrastructure and security requirements for projects and initiatives.
Continuous Improvement
- Proactively identify and implement opportunities to optimize infrastructure utilization and performance.
- Contribute to continual improvement of governance and process documentation, complying with organizational policy.
Key Performance Indicators (KPI)
To measure and monitor the performance of the role in the context of the Section/Department's activities
- Infrastructure availability: uptime of core infrastructure and messaging services against defined targets
- DR support: timely completion of assigned DR testing and replication tasks
- Cybersecurity posture: timeliness of monitoring, alerting, and vulnerability remediation activity
- Change execution: quality and accuracy of infrastructure and security changes carried out
- Ticket/service management: timeliness and quality of help desk ticket resolution and escalation
Minimum Experience & Essential Knowledge
- 12+ years of experience in systems, network, and infrastructure administration within mission-critical, high-availability environments, including significant experience operating with a high degree of autonomy
- Experience within a bank, investment firm, or other regulated financial services organization, operating at a senior level
- Extensive hands-on experience with enterprise Microsoft infrastructure (directory services, virtualization, email/messaging, database systems) and enterprise backup/storage
- Advanced, practitioner-level knowledge of cybersecurity fundamentals: threat monitoring, incident response, vulnerability management
- Experience with cloud platforms and hybrid infrastructure environments
- A proven self-starter, able to draw on deep technical experience to resolve issues independently and exercise sound judgment on when to elevate versus act.
- Bachelor's degree in Computer Science or a related discipline
- Relevant industry certification required, covering security and/or cloud infrastructure (e.g., Security+, CySA+, Microsoft/Azure infrastructure certification, or equivalent); advanced certification such as CISSP or CISM preferred
Core Competencies
- Infrastructure & Cloud Operations
- Cybersecurity Monitoring & Response
- Execution within Defined Standards
- Vendor & Asset SupportContinuous Improvement Mindset