Expert - Information Security (Omani or GCC National)

Job description / Role

Ooredoo Oman Family Member:

As the Expert - Information Security you will be responsible for effective managing the Security and Monitoring system that helps comply with security requirements. The role holder is responsible for providing and ensuring appropriate access to and protect the confidentiality and integrity of business information in compliance with law, regulations, policies and Industry standards and for managing the Information Security Operations and reporting related metrics to management.

Core Responsibilities:

You will be responsible of the following:
- Ensure that the Information Security Operations runs in line with the policies, procedures, standards and guidelines, and other regional, global & compliance requirements
- Ensure complete ownership and compliance to vulnerability management process by regularly tracking and reporting on actionable from vulnerability and penetration tests.
- Assist technology teams with recommended and feasible solutions or best practices to mitigate identified threats or vulnerabilities.
- Review all new technology implementations / projects or changes to reduce or eliminate any possibility of introducing new risks or vulnerabilities.
- Overlook and manage new security projects in security operations center
- Keep reviewing the incidents/events created by ISM team for quality needs, and ensure that valid security incidents/events are delivered by the team.
- Determine security violations and inefficiencies by conducting periodic audits.
- Actively look for security vulnerabilities in our application and network, reporting issues and describing possible solutions.
- Design and maintain security controls
- Stay up to date with security news, keeping an eye out for the latest vulnerabilities and remedies emerging in the field.
- Actively liaise with the development team to ensure a secure architecture.
- Provide regular reports auditing our current services and latest changes, as well as our internal practices.
- Plan Information Security measures to secure Ooredoo Information Assets based on continual review of the security environment
- Plan and handle any critical/emergency information security situation in a well-organized and professional manner.
- Work effectively with ISM leadership to address security requirements and concerns. Keep them abreast of significant developments
- Quick learning, stretch your thinking, share your knowledge and educate others.
- Communicate and collaborate with both technical and non-technical professionals.
- Recognize problems by identifying abnormalities and reporting violations.
- implement security improvements by assessing current situation, evaluating trends and anticipating requirements
- Responsible for developing procedures and policies for initial stand up of a security operations center (SOC) and ongoing management of the SOC.
- Support security monitoring team during critical/emergency incident scenarios.
- Conduct more in-depth analyses of security incidents to identify incidents of compromise.
- Perform intrusion scope and root cause analyses and assist with intrusion remediation, strategy development, and implementation.
- Recommend effective process changes to enhance defense and response procedures.

Requirements

The Person:
You should have a minimum of 6 years of experience in the field of information technology, particularly in a field related to telecommunication services, with at least 4 years of progressive experience in information security with the following

- Must have a solid understanding and working experience in information technology and information security.
- Ability to work and effectively prioritize in a highly dynamic decentralized work environment.
- Must be an intelligent, articulate and persuasive who can serve as an effective member of the management team and who is able to communicate security-related concepts to a broad range of technical and non-technical staff.
- Substantial knowledge in IT and information systems with a Bachelor's Degree in an information technology related field

Skills Required:
- Technical Analytical Skills
- Report Writing
- Monitoring Systems set up and implementation
- Good MS Office skills
- Knowledge of Windows, Solaris, Unix, Linux, Network devices and Information Security Platform
- Good problem solving skills
- Good project management skills
- Good written and spoken English & Arabic
- Analytical, trouble shooting skills and presentation skills

Note: you will be required to attach the following:
- Resume / cv
- Passport-size photograph

About the Company

We are a leading international communications company delivering mobile, fixed, broadband internet, and corporate managed services tailored to the needs of consumers and businesses across markets in the Middle East, North Africa and Southeast Asia. As a community-focused company, we are guided by our vision of enriching peoples lives and our belief that we can stimulate human growth by leveraging communications to help people achieve their full potential.

Formerly known as Qtel Group, we have a customer base of 92.9 million and reported revenues of USD 9.3 billion in 2012.