Requirements
Requires a Bachelor's or Master's degree in Computer Science/Information Technology with 9-11 years of experience in information security. Must hold certifications such as CISSP, CISM, or ISO/IEC 27001 Lead Implementer/Auditor.
Description
Roles and ResponsibilitiesStrategyDevelop and implement information-security strategies and operating models aligned with laws, regulations, and Authority needs.Define the risk framework: maintain registers, scenarios, and response plans with accountable owners and escalation paths.Set Authority-wide security programs and technical standards across sectors to embed best practices consistently.Evaluate emerging technologies and threat trends and issue strategic recommendations to improve security systems and infrastructure.Coordinate with departments to align cybersecurity strategies and work plans with organizational objectives.OperationsLead in-depth analysis of security incidents, direct incident-response activities, and strengthen digital forensics and investigation quality.Plan and coordinate Security Operations Centre (SOC) operations and response workflows with internal and external stakeholders.Support and advise team leads in the development and management of the organization's Vulnerability Assessment and Penetration testing (VAPT) plan and building VAPT tools and frameworksOversee the conduct of readiness evaluations and penetration tests; recommend preventive and corrective actions and track closure.Review architectures for new initiatives and system changes; prescribe security controls during design and implementation.Govern access and privileges: apply eligibility/approval procedures, review entitlements, monitor network/system activity, and report compliance.Execute risk-based audits of technical systems and projects; evaluate control effectiveness and drive corrective plans.Assess new technology projects for alignment with cybersecurity strategy and risk profile; provide improvement recommendations.Manage security assessments of external suppliers and partners and ensure compliance with required security standards.Execute additional Information Security duties assigned by leadership beyond the defined Section scope.Product/Process ImprovementMaintain risk registers and mitigation plans; analyse performance metrics and report system effectiveness and residual risks.Manage and update cybersecurity documentation, including policies, procedures, contingency plans, and ensure legal and regulatory compliance.Prepare and refine emergency/incident response and recovery plans via exercises and lessons learned.Job Qualifications & RequirementsEducationBachelor's degree/ master's degree in computer science/ information technologyExperience9+ Years in case of Master's degree (11+ years in case of Bachelor's degree)QualificationCertifications such as Certified Information Systems Security Professional (CISSP) or, Certified Information Security Manager (CISM), ISO/IEC 27001 Lead Implementer/ Lead Auditor