Manager, InfoSec Architecture & Operations

وصف الوظيفة

  • Perform scanning and risk analysis for potential security issues                                                               
  • Perform risk analysis and remediation recommendations in IT related operations including network operations, systems engineering, change management, and general IT administration oversight            
  • Assist CISO in Designing, administering and maintaining various technical security tools  
  • Identify issues that could impact the organization and escalate any serious issues/ breaches/ violations                                                                                                     
  • Develop/monitor action plans for its closure in liaison with business groups.
  • Provide guidance to operations management team for effective and efficient surveillance and monitoring towards pro-active security and business process non-compliance issue identification
  • Responsible for designing the security architecture
  • Contribute to the recommendations of corporate solutions to resolve security issues.                     
  • Provide mechanisms to monitor all critical services and implementing a measurable Key Risk Indicators (KRIs) & manages the security planning, assessment, risk analysis, risk management, and awareness activities for systems and networking operations.                             
  • Oversee the information security operations and penetration testing                                    
  • Conduct Assurance activities on the implemented security controls and identify and propose corrective action                                                                                                                      
  • Interact with technology team to define and achieve required security objectives for the organization.                                                                                                              

متطلبات الوظيفة

  • Bachelor's degree of Engineering or Computer Science is a must               
  • 12+ years of relevant experience in information security risk management and assessments/audits.
  • CISM, CRISC, CISSP, SANS SEC401, CBE, PCI is a plus.