Information Security Controls Officer/Senior Officer

Description

1.Conduct the necessary user life cycle daily reviews according to the set security controls roadmap to ensure proper business justification is in place for the performed actions.

2.Run the different Identity and Access Management Recertification campaigns according to the defined frequencies and scope to ensure proper access is maintained for all staff and according to business needs.

3.Liaise with the different IT stakeholders to ensure proper IT backup is conducted according to the defined frequencies and scope in alignment with the developed security polices and business requirements.

4.Monitor the developed Security Controls use cases and reports to identify any violations and ensure the necessary corrective actions are taken to close any gaps.

5.Conduct Security Controls reviews on the different frequencies defined in the relevant policies and procedures to ensure compliance with PCI, Swift standards and the developed security policies.

6.Maintain records related to the different reviews for documentation purposes and future audit requirements.

7.Maintain the standard operating procedures (SOP), for the different reviews conducted and ensure proper adherence to develop a consistent and effective manner for review.

8.Escalate exceptions and ensure continuous update of relevant procedures in line with any changes/triggers.

9.Collaborate with other teams within Security & Resilience group to contribute towards facilitating internal / External Audit Missions.

10.Record, track, support and report on all remedial audit activity, including the maintenance of schedules and plans, maintain accurate records on audit, and produce comprehensive reports on audit and quality assurance matters.

11.Ensure tracking and follow-up on the different Security & Resilience outstanding audit issues arising from Internal/external audit missions, assessments, validations.

Qualifications & Experience

Bachelor Degree Bachelor degree of Computer Science or equivalent

Officer: Minimum 0-2 years of experience in IT, IT security, compliance and controls

Senior Officer: Minimum 2-4 years of experience in IT, IT security, compliance and controls

Recommended Certifications:

oCISA

Skills

Very good command of English and Arabic languages

Very good communication skills

Very good Time Management Skills