Qureos Mentor

Virtu Thinko

Core Responsibilities <ul><li>Handle ISO-related Information Security Officer duties.</li><li>Manage cybersecurity compliance requirements.</li><li>Improve overall cyber maturity levels.</li><li>Oversee and coordinate daily information security operations.</li><li>Ensure full alignment with KSA SAMA CSF requirements.</li><li>Carry out Information Security and Cyber Security ISO responsibilities.</li></ul>Qualifications <ul><li>Minimum 2 years of relevant experience.</li><li>Proven ISO consultancy record with references.</li><li>Open to any resource type; Saudi National preferred.</li><li>KSA-based candidate preferred but can be located anywhere.</li><li>Must meet SAMA pre-approval requirement (name/company shared for NOC).</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: &#65020;6,000.00 - &#65020;9,000.00 per month

Information Security Officer

Role PurposeOwns and leads the unified vulnerability and patch management service across all organizational assets. Responsible for end-to-end delivery, governance, reporting, and KPI compliance in line with defined risk-management and regulatory frameworks.Key Responsibilities<ul><li>Lead vulnerability lifecycle management using Qualys VMDR integrated with ServiceNow.</li></ul>*<ul><li>Oversee asset discovery, scanning, prioritization, and remediation across servers, endpoints, and applications.</li></ul>*<ul><li>Define and enforce patching strategy, ensuring CVSS-based remediation within SLA thresholds (7 / 14 / 30-day windows).</li></ul>*<ul><li>Supervise manual patching of production systems, validate rollback plans, and coordinate maintenance windows.</li></ul>*<ul><li>Generate weekly and monthly KPI dashboards, tracking open vulnerabilities, SLA compliance, and risk scores.</li></ul>*<ul><li>Align with compliance standards &mdash; ISO 27001, NIST 800-40, CIS v8, PCI DSS &mdash; and prepare audit-ready evidence.</li></ul>*<ul><li>Mentor and train the junior team on vulnerability analysis, patch deployment, and incident response.</li></ul>*<ul><li>Coordinate escalations, change control, and documentation with Information Security and IT Governance teams.</li></ul>*<ul><li>Contribute to continuous-improvement initiatives and regulatory reporting.</li></ul>Qualifications &amp; Skills<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Computer Science, or related field.</li></ul>*<ul><li>5+ years&rsquo; experience in vulnerability management and patch operations.</li></ul>*<ul><li>Proven expertise with Qualys, ServiceNow, and enterprise patch-management tools (SCCM, Ansible, WSUS).</li></ul>*<ul><li>Strong knowledge of CVSS scoring, threat intelligence correlation, and risk prioritization.</li></ul>*<ul><li>Familiarity with ITIL change / incident processes.</li></ul>*<ul><li>Certifications preferred: CISSP, CISM, CRISC, CompTIA Security+, or Qualys VMDR Specialist.</li></ul>*<ul><li>Strong leadership, documentation, and stakeholder-communication skills.</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: BD1,200.000 - BD2,000.000 per month

Senior Cybersecurity Engineer – Vulnerability Management

DUTIES AND RESPONSIBILITIES:Assist in managing BANK project portfolios across Bahrain, UAE and KSAEnsure project managers appropriately plan, manage, and execute projects according to the approved EPMO framework and standardsStreamline the management and reporting of risks, issues and change processes and work with leaders to create alignment on mitigations and corrective actions neededAssist in leading the communication of monthly projects&rsquo; status reports and their execution status to the Project Steering GroupAssist in the development of regular reports for EPMO Sr. Manager and Bank's management and advise on the current as well as future projects submitted for evaluation, as appropriateAssist in managing the day-to-day activities of the EPMO department and support project planning and management of various projectsOversee the implementation of change initiatives/projects and ensuring adherence to timelines, budget and agreed standardsHarmonize and control project communication with key stakeholdersReview project resource requirements, advise on resource changes and ensure efficient and effective resource allocation and utilizationEnsure project quality assurance is conducted and project deliverables adhere to quality standardsManage the development of dashboards by providing status updates on all projects running at the GroupProvide accurate and timely analysis of actuals and forecast for Capex ReportingApproval of Capex requisitions in flow centric, ensure all requisitions relate to planned project milestones and ensure proper project financial managementManage the development of the processes and standards to assess the feasibility of proposed projects, and prioritize projects with highest potential returns, impact, and strategic alignmentFormulate, organize and monitor inter-connected projects as part of project dependencies management as well as decide on suitable strategies and objectives to run the projectsManage the development and control of deadlines, budgets, and activities. Apply change, risk and resource managementResolve cross-program issues and strategic issues with senior stakeholdersManage the implementation of strategic initiatives, monitor progress and ensure alignment to the Bank&rsquo;s strategy and business landscape in achieving strategic goalsOther General ResponsibilitiesEnsure detailed and accurate records are maintained.Adhere to all policies and procedures regarding budget expenditure, displaying budget control for individual products and courses, and reporting any variances promptly.Actively partake in the running of the department providing ideas and best practices synonymous with a high-performance team.Ensure adherence to BANK policies and security standardsLOCATION Kingdom of BahrainWORKING DAYS &amp; HOURSNormal working days (Sunday to Thursday)8 Hours (If required, ready to work on flexible timings between 7:30 am to 6:30 pm)Job Types: Full-time, Contract Contract length: 12 monthsPay: BD800.000 - BD1,800.000 per month

PORTFOLIO MANAGER

Job Title: Customer Due Diligence (CDD) / KYC LeadJob Purpose The role holder oversees end-to-end Customer Due Diligence (CDD) and Know Your Customer (KYC) processes, ensuring full compliance with regulatory requirements while maintaining a positive customer experience. The position involves managing onboarding, maintenance, and periodic reviews, conducting risk assessments, responding to audits, and driving continuous improvement in due diligence practices.Key Responsibilities<ul><li>Lead CDD/KYC operations across onboarding and periodic reviews in full compliance with regulatory standards.</li><li>Oversee Standard and Enhanced Due Diligence (SDD/EDD) for all customers and ensure timely responses to RFIs and reverse KYC requests.</li><li>Ensure complete and accurate customer documentation and data integrity.</li><li>Identify and assess high-risk clients, politically exposed persons (PEPs), negative media, and sanctions risks.</li><li>Monitor transactions for suspicious activity and escalate concerns appropriately.</li><li>Maintain strong collaboration with Compliance, Relationship Managers, and other internal stakeholders.</li><li>Oversee system upgrades, policy reviews, and improvement initiatives related to financial crime compliance.</li><li>Provide leadership and guidance to the KYC analyst team, ensuring performance targets and quality standards are met.</li><li>Ensure data accuracy, confidentiality, and adherence to the bank&rsquo;s code of conduct and governance standards.</li></ul>Key Performance Indicators<ul><li>Timely completion of all KYC and CDD reviews.</li><li>Accuracy and quality of customer risk assessments.</li><li>Compliance with internal and regulatory requirements.</li><li>Effective leadership and team performance.</li></ul>Qualifications &amp; Experience<ul><li>Bachelor&rsquo;s degree in Finance, Accounting, or a related field (Master&rsquo;s preferred).</li><li>ACAMS/ICA or equivalent certification is an advantage.</li><li>Minimum 3&ndash;4 years of relevant banking or compliance experience.</li></ul>Skills &amp; Competencies<ul><li>Strong analytical, communication, and problem-solving skills.</li><li>Sound judgment and attention to detail.</li><li>Ability to manage multiple priorities in a fast-paced environment.</li><li>Proficiency in Microsoft Office applications.</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: BD800.000 - BD1,200.000 per month

Customer Due Diligence and Onboarding - Team Leader

Job Title: CDD / KYC AnalystJob Purpose Responsible for conducting Client Identification (CIP) and Customer Due Diligence (CDD) reviews for assigned customer portfolios to manage financial crime risk and ensure full regulatory compliance.Key Responsibilities<ul><li>Perform Standard and Enhanced Due Diligence (SDD/EDD) on new and existing customers.</li><li>Collect and verify customer information to ensure accurate risk profiling and documentation.</li><li>Identify high-risk clients, PEPs, sanctions, and adverse media through ongoing monitoring.</li><li>Handle RFIs and reverse KYC requests, ensuring timely and complete responses.</li><li>Escalate unusual or suspicious activities and prepare Suspicious Activity Reports (SARs) when required.</li><li>Collaborate with Compliance, Relationship Managers, and other stakeholders to ensure KYC quality and regulatory alignment.</li><li>Maintain up-to-date knowledge of AML/CFT regulations and bank policies.</li><li>Ensure confidentiality, data protection, and accurate activity logs.</li></ul>Key Performance Indicators<ul><li>Timely completion of KYC reviews and renewals.</li><li>Compliance with AML/CFT policies and procedures.</li><li>Quality and accuracy of customer risk assessments and documentation.</li></ul>Qualifications &amp; Experience<ul><li>Bachelor&rsquo;s degree in a relevant field.</li><li>1&ndash;2 years of banking or compliance experience.</li></ul>Skills &amp; Competencies<ul><li>Strong analytical, communication, and problem-solving skills.</li><li>Attention to detail and sound judgment.</li><li>Ability to work under pressure and manage priorities.</li><li>Proficiency in Microsoft Office applications.</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: BD500.000 - BD800.000 per month

Customer Due Diligence Analyst

Role PurposeResponsible for the end-to-end delivery of Cloud Security Managed Services (Scope A) and provides technical leadership and oversight for Vulnerability Management &amp; Patching (Scope B) across enterprise environments. Leads posture assessments, architecture design, and implementation of security controls, ensuring full alignment with organizational and regulatory standards.Key Responsibilities<ul><li>Conduct cloud-security posture assessments for AWS, Azure, Google Cloud, and Oracle environments.</li><li>Design and implement secure cloud architectures aligned with NIST CSF, CIS Controls, and ISO 27001.</li><li>Configure and maintain CSPM, IAM (RBAC, MFA, SSO), WAF, and encryption controls.</li><li>Integrate SIEM/SOAR tools for 24 &times; 7 threat monitoring and incident response.</li><li>Ensure ongoing compliance with PDPL, PCI DSS, ISO 27001, CBB, SAMA, and CBUAE or other applicable standards.</li><li>Produce compliance mappings, dashboards, and KPI reports (MTTD, MTTR, audit success rate).</li><li>Supervise and guide the Cloud Security Analyst in daily operations and incident handling.</li><li>Provide technical oversight for Scope B, ensuring unified governance between cloud-security and vulnerability-management teams.</li><li>Review and validate Qualys&ndash;ServiceNow integration outputs, remediation timelines, and KPI adherence.</li><li>Align cloud-security monitoring with vulnerability- and patch-management operations for consistent risk posture and reporting.</li><li>Coordinate with Information Security and Governance stakeholders for reviews, approvals, and escalations.</li><li>Oversee and deliver awareness and training sessions, including phishing simulations through KnowBe4 (or equivalent).</li></ul>Qualifications &amp; Skills<ul><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or equivalent.</li><li>5 + years in cloud security engineering or managed security services.</li><li>Hands-on experience with AWS /Azure security tools and Trend Micro Cloud Risk Management or equivalents (Prisma Cloud, Wiz, etc.).</li><li>Knowledge of SIEM /SOAR (Splunk, QRadar, Microsoft Sentinel) and DevSecOps practices.</li><li>Certifications preferred: CISSP, CISM, CCSP, or Azure/AWS Security Specialty.</li><li>Strong analytical and reporting skills; excellent stakeholder communication.</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: BD1,500.000 - BD2,500.000 per month

Cloud Security Lead Consultant / Engineer

Role Summary: The Vulnerability Management Engineer will oversee continuous vulnerability scanning, assessment, and reporting across cloud and on-premises environments using Qualys or equivalent tools.Key Responsibilities:<ul><li>Conduct regular vulnerability scans and assessments.</li><li>Prioritize vulnerabilities based on CVSS scores and risk factors.</li><li>Coordinate with IT and application teams for remediation and validation.</li><li>Prepare vulnerability trend and risk posture reports.</li><li>Ensure compliance with regulatory and internal security requirements.</li></ul>Qualifications &amp; Skills:<ul><li>Bachelor&rsquo;s degree in Information Security or related discipline.</li><li>3&ndash;5 years of experience in vulnerability management or IT security.</li><li>Hands-on experience with Qualys, Tenable, or Rapid7 platforms.</li><li>Familiarity with patch management, risk assessment, and reporting.</li><li>Preferred certifications: CompTIA Security+, Qualys Certified Specialist.</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: BD800.000 - BD1,200.000 per month

Vulnerability Management Engineer

Join Virtu Thinko and explore 14   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.