Qureos Mentor

Corporate Research and Investigations

<div>
 Responsible for creating and maintaining security documentation for CRI Group Systems, verifying that systems are hardened and patched, monitoring system security controls, handling security incidents and auditing for policy compliance. Responsible for implementing new security functionality and making system changes to security servers and devices. Plans, coordinates and implements security measures to safeguard information against unauthorized modification, destruction or disclosure. Monitors and audits network and servers to detect and prevent unauthorized access to CRI Group Systems. Position holder will be responsible for;
 
 
 
 Core Responsibilities
 
 
 
 <ul>
 <li>
 Perform server administration tasks, including user/group administration, security permissions, group policies, printer &amp; scanner services, research event log warnings, errors, and resource monitoring, ensuring system architecture components work together seamlessly.
 </li>
 <li>
 Serve as the subject matter expert supporting MAC OSX, Windows, and all office software and applications, such as Microsoft Office 365, Adobe, and G-Suite products.
 </li>
 <li>
 Maintain internal infrastructure requirements, including installation, configuration, and troubleshooting of laptops, computers, servers, routers, switches, firewalls, printers, exchange(pabx), security protocols, internet, intranet, LANs, WAN,s and network segments.
 </li>
 <li>
 Responsible for the administration of Firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Application Firewalls, Security Information and Event Management systems (SIEM), Remote User Access (VPN), Web/URL Filtering systems, Application Security Testing systems, Authentication systems, and Proxy systems.
 </li>
 <li>
 Performs vulnerability scans on a routine basis as well as for all new system installations in accordance with Vulnerability Scans and Configuration Control procedures.
 </li>
 <li>
 Installs, configures, and monitors remote access control systems such as Virtual Private Network (VPN) and SSL-VPN products.
 </li>
 <li>
 Routinely reviews security, vendor, and other available sources for newly discovered vulnerabilities or newly released patches that should be applied to CRI Group&rsquo;s Systems. Advises other system administrators of these vulnerabilities and assists them as needed in securing their systems.
 </li>
 <li>
 Performs and/or coordinates internal and external audits and penetration attempts to ensure perimeter devices and internal servers are hardened properly.
 </li>
 <li>
 Ensures appropriate authorization and access controls are in place.
 </li>
 <li>
 Maintains and documents network architecture and access control. Participates in design, installs, configures, and maintains network devices and network access control systems. Monitors and troubleshoots network issues.
 </li>
 <li>
 Creating network firewalls and ensuring that they are updated.
 </li>
 <li>
 Configuring user profiles and creating users/group permissions in the domain
 </li>
 <li>
 Sharing and Mapping of the network and shared folders/drives.
 </li>
 <li>
 Managing Active Directory, Domain, and DHCP
 </li>
 <li>
 Installation, upgradation, troubleshooting, and management of IT inventory, including but not limited to computers, PABX, printers, scanners, server, cctv etc.
 </li>
 <li>
 Routinely reviews security, vendor, and other available sources for newly discovered vulnerabilities or newly released patches that should be applied to CRI Group&rsquo;s systems. To frequently conduct risk assessment and share the report with senior management
 </li>
 <li>
 Perform Internal audits of the systems, including all backups, to comply with the protocols of the information security management system
 </li>
 <li>
 Conduct high-level root-cause analysis for service interruption and establish preventive measures.
 </li>
 <li>
 Coordinate with the IT development team during the functional design phase of development efforts to ensure new applications meet appropriate security requirements.
 </li>
 <li>
 Maintain logs of CCTV, System Maintenance, Internet Performance &amp; proxy management. Prepare and share the reports on a monthly basis with management.
 </li>
 <li>
 Conduct Awareness sessions on ISMS to train and educate employees regarding information security
 </li>
 <li>
 Ensure proper compliance of all department policies with respect to the company&rsquo;s requirements.
 </li>
 <li>
 Conducting an internal audit every quarter and also handling an external ISMS audit
 </li>
 <li>
 Keep abreast of new technologies and upgrade systems accordingly.
 </li>
 <li>
 Responsibilities and duties of the position holder can be modified according to the needs and requirements of the Company and work.
 </li>
 <li>
 Following current and prospective ISO Standards, policies and procedures.
 </li>
 <li>
 Carrying out any other task and assignment given by the supervisor and the management
 
 
 </li>
 </ul>
 
 Job Specification
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s in computer science or information technology
 </li>
 <li>
 5-8 years of relevant experience.
 </li>
 <li>
 Having CompTIA A+ Certification / CompTIA Network+ Certification/ CompTIA Security+ Certification/ Cisco CCNA Certification/ Cisco CCNP Certification will be a plus.
 
 
 </li>
 </ul>
 
 Skills Required
 
 
 
 <ul>
 <li>
 Collaboration and teamwork: willing to work in a small team and multitask when required
 </li>
 <li>
 Flexible and adaptable to work effectively in our fast-paced environment.
 </li>
 <li>
 Problem solving &amp; decision making skills
 </li>
 <li>
 Proactive &amp; have an eye for details
 </li>
 <li>
 Critical thinking
 
 
 </li>
 </ul>
 
 Language Skills
 
 
 
 English, Urdu
</div>

ISMS Manager

Join Corporate Research and Investigations and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Corporate Research and Investigations

About Company

ISMS Manager