Cybersecurity & Infrastructure Analyst

Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank.

We are looking for top-tier individuals who are passionate and hungry to add value from day one.

Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow.

We are looking for an Cybersecurity & Infrastructure Analyst.

Purpose of the role:

The Cybersecurity & Infrastructure Analyst provides experienced, execution capacity across the Bank's infrastructure, cloud, and cybersecurity operations, operating within the strategy, standards, and direction set by the Cybersecurity & Infrastructure Lead. Drawing on significant hands-on experience, the role carries out day-to-day infrastructure administration, security monitoring, and operational activity across on-premise, hosted, and cloud environments — exercising sound, experience-based judgment to resolve matters directly where appropriate, and escalating those requiring further guidance or direction — in support of the Bank's infrastructure resilience and cybersecurity posture.

• Support and administer the Bank's infrastructure estate across on-premise, hosted, and cloud environments, including networks, servers, storage, virtualization, and end-user computing.
• Carry out day-to-day administration of core infrastructure platforms, including server virtualization, directory and identity services, email and messaging systems, database systems, and enterprise backup and storage.
• Follow ITIL-aligned service management practices across infrastructure operations, covering incident, problem, and change management.
• Manage the Bank's help desk/service management system, ensuring it is used effectively and tickets are properly logged, progressed, and resolved.

• Manage infrastructure disaster recovery planning and exercises, conducting testing against defined recovery objectives.
• Administer data replication technologies supporting production and DR environments.

• Manage the Bank's day-to-day cybersecurity posture, including threat monitoring, incident response, vulnerability management, and risk mitigation activity.
• Manage the relationship with the Bank's Security Operations Center (SOC), coordinating monitoring, alerting, and incident escalation.
• Administer core security tooling, including email security and endpoint protection.
• Execute data loss prevention and information protection/classification controls in line with strategy and direction set by the Information Security function.
• Manage conditional access and endpoint security configuration for mobile and BYOD access.
• Manage cyber control activity supporting Risk, Compliance, and Internal Audit requirements.

• Carry out infrastructure and security changes in line with standards and processes set by the Cybersecurity & Infrastructure Lead, escalating decisions requiring sign-off or strategic direction.
• Provide senior delivery capacity across infrastructure and cybersecurity workstreams, ensuring continuity of operations at all times.

• Manage day-to-day engagement with infrastructure and security vendors.
• Maintain IT hardware and software inventory and asset records.

• Act as a senior point of contact for application teams, business stakeholders, and Information Security on infrastructure and security requirements for projects and initiatives.

• Proactively identify and implement opportunities to optimize infrastructure utilization and performance.
• Contribute to continual improvement of governance and process documentation, complying with organizational policy.

To measure and monitor the performance of the role in the context of the Section/Department's activities

• Infrastructure availability: uptime of core infrastructure and messaging services against defined targets
• DR support: timely completion of assigned DR testing and replication tasks
• Cybersecurity posture: timeliness of monitoring, alerting, and vulnerability remediation activity
• Change execution: quality and accuracy of infrastructure and security changes carried out
• Ticket/service management: timeliness and quality of help desk ticket resolution and escalation

• 12+ years of experience in systems, network, and infrastructure administration within mission-critical, high-availability environments, including significant experience operating with a high degree of autonomy
• Experience within a bank, investment firm, or other regulated financial services organization, operating at a senior level
• Extensive hands-on experience with enterprise Microsoft infrastructure (directory services, virtualization, email/messaging, database systems) and enterprise backup/storage
• Advanced, practitioner-level knowledge of cybersecurity fundamentals: threat monitoring, incident response, vulnerability management
• Experience with cloud platforms and hybrid infrastructure environments
• A proven self-starter, able to draw on deep technical experience to resolve issues independently and exercise sound judgment on when to escalate versus act.
• Bachelor's degree in Computer Science or a related discipline
• Relevant industry certification required, covering security and/or cloud infrastructure (e.g., Security+, CySA+, Microsoft/Azure infrastructure certification, or equivalent); advanced certification such as CISSP or CISM preferred

• Execution within Defined Standards