Job Description:
Security strategy, assessment, designing and implementing security strategy, governance frameworks over processes, controls, organization, and infrastructure to management cyber security
• Security transformation programs – design and management of security solution implementations and / or remediation programs to address risks across AV, patching, secure build, vulnerability scanning & remediation, logging and monitoring, segregation, threat management, user awareness
• Identity and access management (IDAM), assessing current IDAM practices and designing solutions to improve JML processes, privileged access, and recertification programs
• Breach and incident management, design and implementation of breach and major incident management practices
• Security policies and procedures, design and implementation of security policies, procedures, standards, and controls in line with regulation and/or current standards, ISO27001, NIST, SANS etc.
• Data privacy, implementation of data protection / GDPR programs to address confidentiality and security over customer, employee, or patient data
• Security around emerging technology platforms – mobile device platforms (iOS, Android), cloud services (IaaS, PaaS, SaaS), Big Data, social media
Qualifications & Skills:
Bachelor’s Degree in Computer Science or related field /M.S. degree is preferred
• Deep understanding of cyber security standards, regulations, and best practices (including ISO 27001, NIST, SANS Top 20, Dubai ISR, NESA, HIPAA etc.)
• Preferred Qualifications such as CISSP, CISM, SABSA and SANS GIAC
• Certifications from leading vendors
• An awareness of Security architecture is a preference
• Consulting or Professional Services background gained with a technology vendor, systems integrator, or consultancy services provider
Experience:
- 06 to 08 years of experience in cyber security strategy and transformation engagements
