IT Security Manager / IT Security Architect

Job description / Role

Job Purpose:

Provide high level technical and professional expertise to the IT department and other Sadara functions for delivering the necessary technology services to the business. As needed, recommend, develop and improve Sadara’s computing and communication infrastructure to reflect the current and long-range trends in technology. Candidate will be the leader of the IT Security Administration team. This team is in charge of executing the processes and transactions emanating from the Identity and Access Management (IAM) process:

Duties:

Functional Duties:

1. Develop project and service rationale and perform scoping assessments to determine feasibility; provide guidance and advice regarding vendor selection and implementation process.
2. Functional areas include:
• User ID administration
• Password administration
• Group Administration
• Group Policy Object (GPO) Administration
• Active Directory Data Integrity
• Access permissions to environment
• Role-based access administration
3. Highlight/identify gaps in existing functionality and review requirements with stakeholders.
4. Develop comprehensive requirement specifications that will determine the estimate of cost, time and resources to deploy solutions.
5. Research and recommend high level functional and/or technical solutions.
6. Develop project estimates & complete financial model (costs, savings, revenue opportunities, investment horizon, etc.)
7. Ensure that relevant stakeholders are involved in specification of new services and/or major upgrades to existing services.
8. Modify existing applications or direct programmers and analysts to make changes;
9. Test programs or applications, correct errors and make necessary modifications.
10. Handle complex projects and assignments, such as recurring application, service, or operational problems, and use expertise to recommend solutions to management.
11. Oversee the implementation of new systems/services.
12. Train and direct IT staff by sharing expertise and experience and developing the knowledge of the IT staff.
13. Keep abreast of trends and developments throughout the computer industry to recommend new IT solutions that would improve the performance of certain functions or the company as a whole.
14. Perform any job-related activities as requested by the immediate supervisor/manager.

Specific areas, technologies and products:

• Facilitating definition of the Company’s risk profile
• Maintaining the Cyber security product and system architectures, ensuring that the company’s risk profile is adequately addressed, keeping gaps or overlaps in functionality and protection to a minimum to balance risk with cost
• Maintaining relationship with industry groups, peer companies, and participating in Cyber security forums
• Conducting Business Impact Assessments, formulating Disaster Recovery and Business Continuity Plans
• Establishing intrusion protection / detection plans and mechanisms: Perimeter security, web protection, DDoS detection and response
• Security risk assessment, vulnerability testing, penetration testing
• Identity and access management, security administration
• Firewall administration
• Experience with use and management of SIEM systems
• Driving security awareness programs

In addition, this team perform administration of access and rules for several other environments, such as:

• Wireless guest access
• Web Gateway whitelisting

This specific role is in charge of day-today supervision of two teams:

1. Active Directory team, and general non-SAP systems
2. SAP GRC Access Management team
Each team above consists of 3-5 analysts. In addition, this role maintains close relationship with the Information Security team, who owns the end-to-end IAM process. This role is operational in nature.

Managerial Duties:

• Manage and oversee the day-to-day work performed by staff as assigned
• Ensure all tasks and activities are performed in accordance with Sadara’s policies and procedures.
• Motivate, coach, develop and support employees (3 to 5 analysts)

Requirements

Job Specifications:

Academic and Professional Qualifications (minimum)

Bachelor degree in Computer Science, Management Information Systems (MIS), Engineering or any related field.

Professional Experience (minimum)

• Deep knowledge and experience in one or more areas of IT security: Disaster Recovery / Business Continuity; Security Operations / Security Operations Center; Identity Provisioning; SAP or Application Security
• Experience of analyzing and breaking down problems and information using structured frameworks and methodologies
• Analytical thinking abilities and client facing communication skills
• Deep technical, SAP, Manufacturing or Chemical industry knowledge
• 6+ years of experience in analysis and problem solving
• Small team leadership

Behavioural Competencies:

• Mentoring & Coaching
• Communications skills
• Quality of work
• Innovative approach
• Analytical thinking
• Safety Awareness
• Results Oriented
• Leadership

About the Company

At Hays, we invest in lifelong partnerships that empower people and businesses to succeed. With over 50 years’ success under our belts and a workforce of 10,000+ people across 32 countries, we’ve evolved to put our customers at the heart of everything we do.

So much more than a specialist recruitment business, what really sets us apart is our knowledge through scale, deep understanding and our ability to meaningfully innovate for our customers. By providing advice, insights and expertise on issues you face today in the fast-paced world of work, we help you make the right decisions for tomorrow.

Offering an unrivalled suite of recruitment and workplace solutions, whether you’re looking for what’s next in your career, or have a gap to fill, we’ll help you get where you want to go.

You can rely on us to deliver today and help you plan for tomorrow.