Job Description
• Conduct operational and process reviews in compliance to ISO27001 standards, Documenting reports with clarity, and issuing findings with effective recommendations
• Develop and customize Information Security Policies and Procedures as per ISO27001 standard s guidelines and harmonized with PCI-DSS Standard and IT General Controls.
• Develop various circulars and advisories on different rules and directives of Information Security Policy.
• Perform Gap Analysis and Risk Assessment as per the defined scope.
• Develop or update documentation as per the ISMS standard requirement
• Conduct investigations of security violations and breaches and recommends solutions; prepares reports on intrusions as necessary and provides analysis summary to management.
• Participate in analysis and identification of business risks and the quantitative and qualitative assessment of risks. And Plan, design and implementation of the risk management process
• Provide recommendations of product for upgrades, patches and other general security measures in order to better secure systems for various clients.
• Design and execute information security awareness strategy and programs and Develop information security awareness content in Arabic and English.
• Formulate the Information Security Policy as per ISO27001.
• Conduct operational and process reviews in compliance with ISO27001 standards, Documenting reports with clarity, and issuing findings with effective recommendations
• Develop and customize Information Security Policies and Procedures, in Arabic and English, as per ISO27001 standard s guidelines and harmonized with PCI-DSS Standard and IT General Controls.
Desired Candidate Profile
Qualifications
• B.A in Computer Engineering or any other related fields
• Minimum 4-5 years of cyber security
• Relevant security certifications (CISSP, ISO27001, CISM, ISO22301 Business Continuity,ITIL etc.)