Qureos Mentor

Oman Housing Bank | بنك الإسكان العُماني

<div>
 
 
 Job Purpose:
 
 
 
 The Manager &ndash; Cyber &amp; Information Security (InfoSec) Operations supervises the bank&rsquo;s cyber defense operations, ensuring timely detection, response, and resolution of security incidents. He/ She operates incident handling, digital forensics, and third-party cybersecurity coordination while maintaining compliance with regulatory and internal security frameworks.
 
 
 The Manager &ndash; Cyber &amp; InfoSec Operations supports key operational security controls, drives continuous improvements in threat response, and collaborates with stakeholders to safeguard the bank&rsquo;s information assets across platforms and vendors.
 
 
 
 
 
 
 Key Accountabilities:
 
 
 <ul>
 <li>
 Manages the full lifecycle of cybersecurity incident response including detection, triage, containment, eradication, recovery, and post-incident review.
 </li>
 <li>
 Conducts forensic investigations of compromised systems and preserves digital evidence for compliance and legal use.
 </li>
 <li>
 Updates and tests the incident response plan and playbooks to ensure readiness.
 </li>
 <li>
 Investigates security incidents such as unauthorized access, insider threats, and external attacks.
 </li>
 <li>
 Interfaces with MSSPs and third-party vendors for alert triage, escalation, and monitoring performance.
 </li>
 <li>
 Optimizes SIEM rules, detection logic, and response workflows with vendors and internal teams.
 </li>
 <li>
 Conducts regular meetings with vendors to review SLAs, resolve issues, and improve service levels.
 </li>
 <li>
 Evaluates emerging cybersecurity technologies and engages with vendors to enhance capabilities.
 </li>
 <li>
 Conducts risk assessments, vulnerability scans, and penetration testing to identify and mitigate threats.
 </li>
 <li>
 Implements and maintains the Bank&rsquo;s information security program in compliance with regulatory and business standards.
 </li>
 <li>
 Develops and enforces cybersecurity policies, standards, and procedures in alignment with frameworks (ISO 27001, CBO, MTCIT).
 </li>
 <li>
 Manages ISO 27001 certification efforts and maintains ISMS documentation and audit readiness.
 </li>
 <li>
 Maintains the cybersecurity risk register, audit findings, and remediation tracking.
 </li>
 <li>
 Performs user access reviews and privileged access reviews for critical systems in compliance with RBAC and regulatory requirements.
 </li>
 <li>
 Manages enforcement of PAM controls and maintains evidence of periodic access reviews.
 </li>
 <li>
 Approves firewall, system, and administrative access changes as the designated ISO authority.
 </li>
 <li>
 Coordinates with HR to manage onboarding and offboarding access controls for staff, vendors, and contractors.
 </li>
 <li>
 Provides security input for new IT and business projects, ensuring risk mitigation is embedded in solution design.
 </li>
 <li>
 Conducts security assessments, architectural reviews, and integration support for new systems.
 </li>
 <li>
 Communicates incident updates, risks, and resolutions to stakeholders across IT, Legal, Compliance, and Business Units.
 </li>
 <li>
 Develops and delivers cybersecurity awareness and training programs to staff.
 </li>
 <li>
 Fosters a culture of accountability, proactive defense, and information security ownership.
 </li>
 <li>
 Leads cyber drill simulations and incident response exercises to improve response capabilities.
 </li>
 <li>
 Ensures compliance with data protection regulations and internal privacy policies.
 </li>
 <li>
 Develops and maintains privacy notices, consent forms, and data handling procedures.
 </li>
 <li>
 Manages data subject access requests and leads investigations into privacy-related incidents.
 </li>
 <li>
 Acts as the main liaison with Data Protection Authorities during audits or investigations.
 </li>
 <li>
 Executes the information security roadmap aligned with enterprise risk strategy.
 </li>
 <li>
 Ensures ongoing adherence to cybersecurity best practices, regulatory mandates, and corporate security policies.
 </li>
 <li>
 Maintains high standards of professionalism, accuracy, and integrity in all operational duties.
 </li>
 <li>
 Collaborates with internal functions to sustain an enterprise-wide security and privacy posture.
 </li>
 </ul>
 
 
 
 
 
 Qualifications and Experience:
 
 
 <ul>
 <li>
 Bachelor Degree in Information Security, Cybersecurity, Information Systems or a related field.
 </li>
 <li>
 Professional certification in Information Security such as: GCIH, GCFA, GCFE, CISSP, CEH, CISM, ISO 27001) is preferred.
 </li>
 <li>
 Minimum of 4 years of experience with at least 2 years in a banking or a regulated environment.
 </li>
 <li>
 Familiarity with using cybersecurity tools such as SIEM, EDR and forensic platforms.
 </li>
 <li>
 Demonstrates familiarity with country-specific information security regulations and expertise.
 </li>
 <li>
 Strong knowledge of related ISO such as ISO 27001 and related global standards.
 </li>
 <li>
 Ability to conduct risk assessments, vulnerability assessments and penetration testing.
 </li>
 <li>
 Ability to develop IS standards, procedures and controls.
 </li>
 </ul>
 
 
 
 
 
 Applicants who are meeting the job requirements will be contacted.
 
 
 
 
 
 
 
 ** Applications will be accepted until 02-Nov-2025 at 2:00 P.M
 
 
 
 
 Submissions received after this date and time will not be considered **
 
 
</div>

Manager – Cyber & InfoSec Operations

<div>
 
 
 Job Purpose:
 
 
 
 The Digital Security Engineer embeds security controls throughout the software development and deployment lifecycle, ensuring banking systems remain secure, compliant, and resilient. He/She implements automated security scanning, builds and maintains DevSecOps pipelines, and performs application security testing across internal and third-party platforms. The Digital Security Engineer collaborates with development teams to remediate vulnerabilities, supports secure integration with external partners, and ensures compliance with CBO regulations and internal cybersecurity frameworks.
 
 
 
 
 
 
 Key Accountabilities:
 
 
 <ul>
 <li>
 Designs and implements CI/CD security pipelines in GitLab with automated security gates.
 </li>
 <li>
 Configures and maintains security scanning tools including SonarQube, Snyk, and Burp Suite.
 </li>
 <li>
 Performs application security testing on web and mobile applications (React Native, Flutter).
 </li>
 <li>
 Conducts API security assessments for internal systems and partner integrations.
 </li>
 <li>
 Reviews source code in JavaScript, TypeScript, Dart, and Node.js to identify vulnerabilities.
 </li>
 <li>
 Performs penetration testing on digital banking applications and services.
 </li>
 <li>
 Assesses mobile app security for iOS and Android, including reverse engineering and threat analysis.
 </li>
 <li>
 Implements and manage secrets and key management using OCI Vault.
 </li>
 <li>
 Configures Web Application Firewall (WAF) rules and policies in Oracle Cloud Infrastructure (OCI).
 </li>
 <li>
 Ensures compliance with CBO cybersecurity regulations, PCI-DSS standards, and internal ISMS policies.
 </li>
 <li>
 Conducts third-party security assessments for partner integrations and platforms.
 </li>
 <li>
 Manages software license compliance and audits usage of open-source and commercial components.
 </li>
 <li>
 Reviews and approves third-party libraries to ensure proper licensing and usage.
 </li>
 <li>
 Guides developers in selecting properly licensed components or suggests compliant alternatives.
 </li>
 <li>
 Manages the vulnerability disclosure lifecycle and coordinates remediation workflows.
 </li>
 <li>
 Trains developers on secure coding practices aligned with OWASP Top 10 and industry standards.
 </li>
 <li>
 Responds to application-layer security incidents and forensic investigations.
 </li>
 <li>
 Uses AI tools to analyze vulnerabilities and generate automated remediation guidance.
 </li>
 </ul>
 
 
 
 
 
 Qualifications and Experience:
 
 
 <ul>
 <li>
 Bachelor's degree in Cybersecurity, Computer Science, or related field
 </li>
 <li>
 A professional certification in one of the cybersecurity or information security domains (e.g., CISSP, CEH, OSCP, GWAPT, GIAC, etc.)
 </li>
 <li>
 Minimum of 5 years in application security, DevSecOps, or security engineering.
 </li>
 <li>
 Proven track record of executing similar accountabilities in Banking, fintech, or a regulated industry.
 </li>
 <li>
 Vast experience in web and mobile application security testing.
 </li>
 <li>
 Familiarity with JavaScript/TypeScript OR Dart preferred.
 </li>
 <li>
 Strong understanding of secure coding practices and OWASP Top 10.
 </li>
 <li>
 Hands on experience in implementing security in CI/CD pipelines.
 </li>
 <li>
 Clear understanding of CBO cybersecurity regulatory requirements.
 </li>
 </ul>
 
 
 
 
 
 Key Skills &amp; Competencies:
 
 
 <ul>
 <li>
 Strong proficiency in React Native and Flutter security assessments
 </li>
 <li>
 Advanced capability in software license compliance and audit processes
 </li>
 <li>
 Good in open-source license management (MIT, Apache, GPL, etc.).
 </li>
 <li>
 Hands on PCI-DSS compliance implementation
 </li>
 <li>
 Excellent in securing Oracle Cloud Infrastructure (OCI) environments
 </li>
 <li>
 Good skills in IBM API Connect security configurations
 </li>
 <li>
 Good Temenos platform application security skills.
 </li>
 <li>
 Profeicent in RASP technologies
 </li>
 <li>
 Good skills in threat modeling using STRIDE and PASTA frameworks
 </li>
 <li>
 Hands-on skill in binary analysis and reverse engineering techniques
 </li>
 <li>
 Good in container security scanning and compliance skills.
 </li>
 <li>
 SIEM tools (Splunk, ELK)
 </li>
 <li>
 Excellent analytical and problem-solving skills
 </li>
 <li>
 Strong interpersonal communication skills preferably in Arabic and English
 </li>
 </ul>
 
 
 
 
 
 Applicants who are meeting the job requirements will be contacted.
 
 
 
 
 
 
 
 ** Applications will be accepted until 2-Nov-2025 at 2:00 P.M
 
 
 
 
 Submissions received after this date and time will not be considered **
 
 
</div>

Digital Security Engineer

<div>
 
 
 Job Purpose:
 
 
 
 The Digital Operations Engineer manages the Bank&rsquo;s Oracle Cloud Infrastructure and Kubernetes environments to ensure stability, security, and scalability of digital banking services. He/She maintains 99.9%+ service uptime, optimizes infrastructure performance and cost, and enforces CI/CD best practices across digital platforms. The Digital Operations Engineer implements monitoring and observability tools, builds infrastructure as code, and responds to incidents with precision to minimize disruption. He/She enables development teams with robust cloud-native solutions that support the Bank&rsquo;s innovation and digital transformation goals.
 
 
 
 
 
 
 Key Accountabilities:
 
 
 <ul>
 <li>
 Manages and optimizes the Oracle Cloud Infrastructure (OCI) environment to ensure stability, scalability, and cost-efficiency.
 </li>
 <li>
 Deploys and maintains Oracle Kubernetes Engine (OKE) clusters for containerized workloads.
 </li>
 <li>
 Implements infrastructure as code using Terraform to enable consistent and repeatable infrastructure provisioning.
 </li>
 <li>
 Builds and maintains CI/CD pipelines for React Native, Flutter, React, and Node.js applications, supporting automated deployment workflows.
 </li>
 <li>
 Monitors production systems using Prometheus, Grafana, and OCI Monitoring to ensure proactive performance tracking and incident detection.
 </li>
 <li>
 Responds to production incidents, performs root cause analysis, and supports on-call incident handling rotation.
 </li>
 <li>
 Implements and tracks Service Level Indicators (SLIs), Service Level Objectives (SLOs), and error budgets to uphold service reliability standards.
 </li>
 <li>
 Manages Oracle Autonomous Database instances, including performance tuning and query optimization.
 </li>
 <li>
 Configures OCI networking components such as Virtual Cloud Networks (VCNs), load balancers, and security groups to ensure secure and efficient connectivity.
 </li>
 <li>
 Implements backup, restore, and disaster recovery procedures to support business continuity and data protection.
 </li>
 <li>
 Optimizes cloud resource utilization and cost efficiency through proactive rightsizing and monitoring.
 </li>
 <li>
 Configures auto-scaling policies to ensure high availability of applications and infrastructure.
 </li>
 <li>
 Manages secrets and encryption keys using OCI Vault to enforce secure credential management.
 </li>
 <li>
 Implements centralized logging using the ELK stack for efficient log aggregation and analysis.
 </li>
 <li>
 Supports mobile application packaging and deployment to the Apple App Store and Google Play Store.
 </li>
 <li>
 Collaborates with development and testing teams to execute blue-green and canary deployment strategies.
 </li>
 <li>
 Troubleshoots infrastructure and application performance issues to minimize downtime and improve user experience.
 </li>
 <li>
 Creates and maintains detailed operational documentation and runbooks for repeatable processes and incident resolution.
 </li>
 <li>
 Utilizes AI-powered tools for infrastructure design validation, performance insights, and troubleshooting.
 </li>
 <li>
 Ensures cross-platform CI/CD pipelines are maintained across all major digital touchpoints, including web, mobile, and backend services.
 </li>
 </ul>
 
 
 
 
 
 Qualifications and Experience:
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, IT, or a related field.
 </li>
 <li>
 Professional certification in Oracle Cloud Infrastructure and Kubernetes Administration.
 </li>
 <li>
 Minimum of 5 years of experience in DevOps, SRE, or cloud infrastructure experience
 </li>
 <li>
 Hands on experience in Infrastructure as Code (Terraform), CI/CD Pipeline (Web and/ or mobile applications), Oracle Cloud Infrastructure and Kubernetes Administration.
 </li>
 <li>
 A proven track record of executing similar technical mandates in Banking, fintech, or a regulated industry.
 </li>
 <li>
 Ability to work under pressure during production incidents with on-call and rotation-based availability.
 </li>
 <li>
 Familiarity with mobile app deployment processes (iOS/Android) is desired.
 </li>
 </ul>
 
 
 
 
 
 Key Skills &amp; Competencies:
 
 
 <ul>
 <li>
 Strong Linux/Unix system administration skills
 </li>
 <li>
 Excellent troubleshooting and problem-solving skills
 </li>
 <li>
 Strong communication and documentation abilities
 </li>
 <li>
 Experienced across multiple language ecosystems (Node.js npm, Dart pub)
 </li>
 <li>
 Advanced Oracle Cloud Infrastructure (OCI Architect, Operations) skills
 </li>
 <li>
 Excellent Kubernetes Administrator (CKA, CKAD) skills.
 </li>
 <li>
 Skilled in Oracle Autonomous Database administration components.
 </li>
 <li>
 Experienced level of creating and managing Helm charts for Kubernetes
 </li>
 <li>
 Good abilities in using service mesh technologies (Istio, Linkerd)
 </li>
 <li>
 Hands-on experience with GitOps tools (ArgoCD, Flux)
 </li>
 <li>
 Strong capacity planning and forecasting skills
 </li>
 <li>
 Good expertise in cloud cost optimization strategies
 </li>
 <li>
 Experienced in disaster recovery planning
 </li>
 <li>
 Advanced skills in banking or financial services infrastructure
 </li>
 <li>
 Proficient with APM tools (New Relic, Datadog, Dynatrace)
 </li>
 <li>
 Good Operational knowledge of message queues (Kafka, RabbitMQ)
 </li>
 <li>
 Skilled in load testing tools (k6, Gatling)
 </li>
 <li>
 Experienced skills in deploying mobile apps via App Store Connect and Google Play Console.
 </li>
 <li>
 Good skills in build systems (npm for React Native/Node.js, pub for Flutter)
 </li>
 </ul>
 
 
 
 
 
 Applicants who are meeting the job requirements will be contacted.
 
 
 
 
 
 
 
 ** Applications will be accepted until 2-Nov-2025 at 2:00 P.M
 
 
 
 
 Submissions received after this date and time will not be considered **
 
 
</div>

Digital Operations Engineer

<div>
 
 
 Job Purpose:
 
 
 
 The Digital Development Engineer builds and maintains OHB&rsquo;s digital ecosystem, including the mobile super-app, web platforms, and backend services. He/She develops secure and scalable solutions across the full stack, integrates with Temenos Digital banking systems and IBM API Connect, and enables third-party partnerships. The Digital Development Engineer applies AI-assisted workflows and modern development practices to accelerate delivery, optimize performance, and ensure compliance with security and regulatory requirements. He/She plays a key role in advancing OHB&rsquo;s digital transformation by delivering customer-centric, high-performance digital services.
 
 
 
 
 
 
 Key Accountabilities:
 
 
 <ul>
 <li>
 Develops and maintains high-performance mobile applications for iOS and Android using React Native or Flutter.
 </li>
 <li>
 Builds responsive and secure web applications for desktop banking using React.
 </li>
 <li>
 Designs and implements backend microservices using NestJS (TypeScript) on Oracle Cloud Infrastructure (OCI).
 </li>
 <li>
 Integrates core banking capabilities by consuming APIs from Temenos Digital (Infinity).
 </li>
 <li>
 Configures and consumes APIs through IBM API Connect gateway, ensuring secure and scalable integrations.
 </li>
 <li>
 Implements micro-frontend architecture to enable modular 3rd party partner integrations.
 </li>
 <li>
 Builds and maintains RESTful and GraphQL APIs for consumption by frontend and external clients.
 </li>
 <li>
 Applies secure authentication and authorization mechanisms, including OAuth 2.0 and JWT.
 </li>
 <li>
 Writes and maintains unit, integration, and end-to-end tests to ensure code quality and reliability.
 </li>
 <li>
 Leverages AI development tools (e.g., Claude Code, GitHub Copilot) to enhance development productivity.
 </li>
 <li>
 Participates in peer code reviews with a focus on performance, security, and maintainability.
 </li>
 <li>
 Contributes actively in Agile/Scrum ceremonies, including sprint planning, reviews, and retrospectives.
 </li>
 <li>
 Optimizes application performance, backend logic, and database query efficiency.
 </li>
 <li>
 Documents APIs, architectural components, and technical specifications in alignment with governance standards.
 </li>
 <li>
 Supports production deployments and resolves issues through root cause analysis and debugging best practices.
 </li>
 </ul>
 
 
 
 
 
 Qualifications and Experience:
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Software Engineering, or related field
 </li>
 <li>
 Minimum of 5 years of experience in professional software development.
 </li>
 <li>
 Proven track record of executing similar accountabilities in Banking, fintech or a regulated industry.
 </li>
 <li>
 Strong portfolio of mobile and/or web applications (GitHub/portfolio ).
 </li>
 <li>
 Experience with React Native OR Flutter.
 </li>
 <li>
 Experience with using Agile/Scrum methodologies.
 </li>
 </ul>
 
 
 
 
 
 Key Skills &amp; Competencies:
 
 
 <ul>
 <li>
 Proficient in Temenos platforms (T24, Infinity, Transact).
 </li>
 <li>
 Skilled in IBM API Connect and enterprise API gateways.
 </li>
 <li>
 Expert in Oracle Cloud Infrastructure (OCI) administration.
 </li>
 <li>
 Good skills in micro-frontend architecture using Module Federation.
 </li>
 <li>
 Advanced implementation skills in event-driven architecture with Kafka or RabbitMQ
 </li>
 <li>
 Skilled in Kubernetes deployment and orchestration
 </li>
 <li>
 Experienced in mobile app deployment for iOS and Android stores
 </li>
 <li>
 Well-versed in PCI-DSS standards and secure coding best practices
 </li>
 <li>
 Proficient in CI/CD pipeline development and optimization
 </li>
 <li>
 Excellent problem-solving and debugging skills
 </li>
 <li>
 Strong interpersonal communication skills in Arabic and English.
 </li>
 </ul>
 
 
 
 
 
 Applicants who are meeting the job requirements will be contacted.
 
 
 
 
 
 
 
 ** Applications will be accepted until 2-Nov-2025 at 2:00 P.M
 
 
 
 
 Submissions received after this date and time will not be considered **
 
 
</div>

Digital Development Engineer

Join Oman Housing Bank | بنك الإسكان العُماني and explore 4   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Oman Housing Bank | بنك الإسكان العُماني

ABOUT_COMPANY

Manager – Cyber & InfoSec Operations

Digital Security Engineer

Digital Operations Engineer

Digital Development Engineer