Qualification:
- Bachelor’s degree in computer science, Information Security, or related field.
- 
Professional certifications on any of the below are highly valued.
- 
ISO 27001 Lead Implementer or Auditor
- 
CISA (Certified Information Security Manager)
- 
CISSP (Certified Information Systems Security Professional)
- 
CCSP (Certified Cloud Security Professional)
Exp : 3-5 Years in in information security or cybersecurity roles.
Arabic and English speaking - Male
Job Summary
A technical security person with technical expertise and soft skills, including a deep understanding of security frameworks and technologies, risk management, and the ability to communicate complex technical information to non-technical stakeholders. They must also be proficient in areas like network architecture, cloud security, oversee security policies, manage risks and compliance by playing a critical role in protecting our digital assets.
Key Responsibilities
- Ability to translate security frameworks like ISR, NIST, ISO 27001, ISR into actionable technical policies and controls.
- Conduct risk assessments on a regular basis to identify vulnerabilities, and quantify the potential impact of threats on entities people, process and technologies and define mitigation strategies
- Perform risk analysis on any change or any new implementation by identifying threats, vulnerabilities, likelihood of occurrences and impacts for applications and systems
- Review current entity system baseline security measures and recommend controls
- Review network architecture, firewalls, security architecture, cloud security controls and services of cloud environment to check their security measures.
- Conduct compliance checks on entity applications/ systems and prepare gap analysis report identifying findings and recommend mitigations to support implementation of ISMS standards with entity strategies and regulations
- Review and ensure proper encryption techniques are used to protect sensitive data at rest and in transit. Evaluate and recommend encryption technologies and solutions to enhance data security.
- Coordinate with business teams to ensure the security signoff process to enforce security best practices across both cloud and on -premises
- Prepare reports to senior management highlighting the effectiveness of security controls on entity systems and infrastructure.
Skills
- Strong knowledge of cybersecurity frameworks (NIST, ISO27001, ISR)
- Experience with security tools and technologies (e.g., GRC, PAM, DLP tools etc.)
- Excellent Analytical and problem-solving skills
Adaptability and continuous learning