Responsible to manage Business Continuity program as per regulatory framework
· Must have experience in Information Security, IT Risk Management with strong academic background
· Ability to stay current with emerging threats, security risks and potential impacts to the business
· Should have strong exposure on Frameworks, IDS/ IPS, Firewalls, Standards, Web App Security, Vulnerability Scanners, Network Security, Cyber Security, Anti Malware Systems etc.
· Hands-on experience in Information Security & Risk areas driving remediation, analysis and mitigation in Cyber security, IT Infrastructure, and applications.
· Candidate should have at least one Information security certification CISM, CISA, CISSP or CEH
· Any other required tasks
· Strong experience in Information Security Management System, Policy & Procedures creation, and implementation
· ISO27001 Assessment Specification for a framework of policies procedures that include all technical & operational controls
· Strong experience of Information Security Risk Management, Security Assessment, Defense in depth and offensive vs defensive techniques
· Vulnerability Management, Incident Management, Threat Intelligence and Analytics
· Cybersecurity Framework Implementation, Tools & Technologies
· knowledge of Cybersecurity tools like Web Application Firewall, Privilege Identity & Access Management, SIEM, ZTA & Micro segmentation and Encryption
· Must have understanding of Endpoint & Network Security technologies like EDR, Firewall, IDS/IPS, SSL VPN etc.
· Responsible for managing Information & Cybersecurity compliance requirements
· Perform risk assessment of all key applications and IT Infrastructure to ensure all risks are identified and mitigated
· Responsible for handling the relevant application security practice areas like penetration testing, vulnerability assessment, data leakage protection, network security, monitoring, etc.
· Periodically provide reports of IT security compliance, risk, and overall security posture to the senior management
· Ensure that potential security incidents are correctly identified, analyzed, investigated, reported, and taken care of the ongoing operational components of Enterprise Information security
· Responsible for evaluating and performing proof of concept of new Cyber Security Products required by the organization
Starlink is part of the Ooredoo Group of companies established back in 2006. Starlink is the first retailer for mobile and accessories. Since then Starlink has branched out to become one of the largest outsource-managed services provider in multiple areas such as: IT, installations, maintenance and contact centers.
