Feb 18, 2014

Assistant Manager - Information Security - Information Technology

Location: Bahrain

Job Description
Key Accountability :
To Support the Information Security Program by implementing, monitoring, and maintaining information security operational process including log management, vulnerability management, incident management, IT asset management, access control administration tasks, and other security operational processes.

Scope of the Job:
Administer the access control procedures for designated IT applications, systems, and network infrastructure.
Govern the log management system. Configure log sources like systems and databases. Monitor to ensure that audit logs record user activities, exceptions, and information security events and are kept for an agreed period of time. Monitor to ensure that the proper security settings regarding the capture and storage of events are in compliance with incident reporting procedures.
Conduct regular internal and external network and system vulnerability assessment and provide System administrators with reports. Follow up with system administrators to ensure remediation actions. Monitor technical vulnerability alerts to make timely and appropriate recommendations to address the associated risk.
Scan the network to ensure that only approved monitoring tools or capture processes are being used in compliance with existing information and privacy policies, standards, guidelines processes, and procedures.
Provide administration support for the incident management process. Act as the central point of contact for incident reporting. Maintain safely the incident reports.
Participate in the development of system configuration baselines. Monitor changes to the IT baselines and provide reporting for unauthorized changes
Monitor the network for intrusion and hacking activities. Work with antivirus and intrusion prevention software to analyze their logs for issues and perform investigation.
Support in PCI DSS related reviews internally within BUs.


Desired Profile
Experience with security technologies & standards
Around Three to Five years of IT security and operations management experience
Strong technical domain expertise with IT infrastructure, networks, systems, and hosted services preferred individual will have come up through the ranks
Ability to work with individuals of varying degrees of technical understanding; should be able to adjust communication style based on targeted audience.


Key Skills
Skilled at drafting policies/procedures and gaining consensus through negotiation.
Excellent oral and written communication skills.
Excellent customer management and negotiation skills required.
Effective interpersonal skills including facilitation skills and conflict resolution
Ability to work with individuals of varying degrees of technical understanding; should be able to adjust communication style based on targeted audience.

Apply to this Job