Key Responsibilities:
· Develop and implement comprehensive information security strategies and plans.
· Update security policies and procedures in alignment with international standards (e.g., ISO 27001).
· Conduct regular security assessments to identify vulnerabilities and recommend remediation actions.
· Evaluate tools and technologies to improve security posture based on assessment and investigation findings.
· Continuously monitor networks and systems to proactively detect and respond to security threats.
· Utilize security analytics tools (e.g., SIEM) to analyze incidents and generate detailed reports.
· Conduct employee training sessions and awareness campaigns on information security best practices.
· Develop and maintain incident response plans for effective handling of security breaches.
· Investigate security incidents, document findings, and recommend corrective measures.
· Review and update policies and procedures in line with evolving threats, regulations, and industry trends.
· Ensure compliance with relevant data protection regulations (e.g., GDPR).
Required Skills:
· Comprehensive knowledge of information security technologies (e.g., SIEM, DLP, IDS/IPS, EDR).
· Strong analytical skills and ability to manage and investigate security incidents.
· High problem-solving abilities and sound decision-making in high-pressure situations.
· Effective communication skills and the ability to explain complex issues to non-technical stakeholders.
· Ability to work under pressure and in fast-paced environments with diverse teams.
Qualifications and Certifications:
· Bachelor's Degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field.
· Preferred candidates hold advanced degrees in cybersecurity or information management.
· Professional certifications such as:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CEH (Certified Ethical Hacker)
- ISO/IEC 27001 Lead Implementer or Lead Auditor
- CompTIA Security+, GIAC (e.g., GSEC, GCIH)
Required Experience:
· Minimum of 8 years of professional experience in information security or cybersecurity.
· Experience in leading and implementing security projects that comply with international standards.
· Hands-on experience in security assessments and incident investigation and reporting.
Preferred Qualifications:
· Experience working in critical or sensitive sectors such as finance, oil & gas, or energy.
· Familiarity with Critical Infrastructure Protection (CIP) standards and practices.
· Experience using incident management tools such as Splunk, QRadar, or ArcSight.
· Ability to work with multidisciplinary teams and coordinate with external auditors and regulatory bodies.
Summary of our Terms & Conditions:
· Work Cycle of 56 Days Work /21 Days Leave including travel days (Europe & North America Candidates)
· Work Cycle of 65 Days Work /21 Days Leave including travel days (Other Candidates)
· 9 Hours a day / 6 Days a week
· Payment for work days only
· Air fare travel by Economy Class
· Medical cover
· Accident cover
· Accommodation / Food and internal transportation to be provided by the client
· Single Status