Job Details
Experience Needed:
Career Level:
Education Level:
Salary:
Job Categories:
Skills And Tools:
Job Description
- To maintain and improve the organization Information Security Management System including Business Continuity in order to protect the confidentiality, integrity, and availability of information.
- Give expert recommendations for the identified incidents to Company’s diffident teams and to identify related improvement opportunities on regular basis.
- Develop/ Maintain ISMS & BCM policy & procedures including disaster recovery and contingency plans.
- Monitor related policy & procedures compliance and referring recommendations to appropriate department stakeholders.
- To review the identified information security incidents and give the best security recommendations to respective department stakeholders.
- Identify & Analyze the information security risks and follow with the concerned parties to apply the controls.
- Driving change projects and building new information security capabilities.
- To identify security design gaps in existing and proposed architectures and recommend changes for improvement.
- To deliver Information Security & BCM related training courses.
- Liaison with external testing agencies and track the identified vulnerabilities.
- To coordinate any related external audits as instructed by related team lead.
- Review existing disaster recovery, crisis management, or business continuity plans.
Job Requirements
- 10 + years of relevant experience in the specific industry.
- Bachelor’s degree in a relevant discipline.
- Certified or Trained in one of relevant certifications such as CBCP/ CISSP/ CRISC/ CEH/ CISM.
- Certified or Trained in ISO 22301 & 27001.
- Experience in Information Security Risk Assessment and Incident prevention.
- Technical Knowledge of Information Technology and Security Issues
- Knowledge of BCP, Information Security Domains
- Knowledge of Risk Assessment and Incident prevention
- Knowledge of Information Security Policies and Process writing
- Knowledge of IT Security Management
- Knowledge of IT Service Core processes
- Familiar with Software Development Life Cycle
- Familiar with IT frameworks, such as ISO 22301, 27001, COBIT, ITIL
- Knowledge of various operating systems, database and applications