Senior Manager – Cyber Security – Emirati Talent Pool

Applications are invited for the position of Senior Manager - Cyber Security. The role is only opened for Emirati candidates.

This position is within the IT Department and reports to the Chief Financial Officer.

The jobholder is responsible for continuously assessing, auditing and recommending improvements to EKFC corporate Information Security which will include Policy, Collaborating with various departments like Audit (Internal & External), HR, Legal and 3rd party security partners.

Manage Risk identification and Mitigation that will ensure EKFC Infrastructure comply with all Operational, Legal and Security requirements. Review Design, Implementation of Information security controls across all new and existing IT Services to ensure SLA’s are met, GRC process followed, achieve desired level of risk appetite implemented by IT and improve Cyber security risk posture of EKFC.

Key Accountabilities

• Build design, implementation and any applicable certification on Cybersecurity aligned with standards like ISO/IEC 27000 series, PCI/DSS, Data Protection Laws, GDPR, NESA, Sarbanes Oxley etc.
• Defines EKFC ‘s vision for Cybersecurity Policies, Technologies and Metrics aligned to groups strategies & priorities
• Collaborate with EKFC IT Security team with input on security policies, Risks and ensure controls in place
• Assess Cybersecurity services in EKFC – so that Security Incidents are reduced and 95% SLA is delivered
• Review overall Cybersecurity technology to identify, protect and respond to Incidents and work with 3rd party partners, Eg : Security Operation Centre, to Proactively monitor and deliver appropriate & quick remediation for Incidents
• Leads EKFC Cybersecurity Steering committee to approve standards and processes, and reports against IT-wide compliance. Manage security governance and review of policies to ensure Information systems are secure and any Intrusion are detected and appropriate action taken including updating policy framework
• Define and implement a risk management framework for IT risks facing EKFC including operational, legal, regulatory and security risks that could impact company. The framework should be based on industry standards, industry best-practices and business requirements
• Be an information security expert and work with Legal, HR, Internal Audit, Group Security and technical support to provide expert advice and guidance on the requirements for security controls
• Drives organizational risk management framework that assesses external and internal IT related risks
• Work with EKFC IT team to ensure IT Services/projects both New and existing, follow strict IT Security guidelines
• Own KPI’s that provide view of Security state at EKFC and all stakeholders and own cyber-security risk dashboard including security metrics, monitoring parameters and reporting requirements

Education Qualification

• BE or Master’s Degree (must) with focus in Computer Science, Maths etc.
• Certifications in Cyber security/ IT Security / Risk - CISSP, CISM, CISA, GIAC, CEH, CRISC etc.
• ITIL, AGILE/PMP, COBIT certification (Preferred)

Experience & Knowledge

• Minimum 8 years of IT Leadership Experience with extensive focus on IT Security
• Mandatory 5 years’ experience in IT Security leadership covering IT Audit, IT Risk and Cybersecurity
• Must have lead Information Security/Risk in a Global organisation with Complex/Hybrid IT Environment
• Strong knowledge of IT Infrastructure – both On Premise and Cloud, BYOD, Application development etc.
• Must have followed IT GRC Methodologies

Skills

• Strong problem solving, analytical and time management skills
• Security Frameworks - ISO2700130000/CIS Critical security controls, NESA etc.
• Vulnerability Assessment and Penetration Testing (VAPT)
• IT Security/Cybersecurity
• ITSM and COBIT skills
• Strong Interpersonal, Communication & Leadership skills.