Information Security and GRC Senior Manager

Job description / Role

Job summary
- Initiate and supervise planning, development, maintenance, and improvement of the Information Security Management System.
- Initiate and supervise Information Systems audits to assess the effectiveness of security controls and communicate findings to senior management for action.
- Review and assess information security policies, standards, guidelines and procedures.
- Initiate, coordinate and supervise security awareness programs, security reviews and audits.
- Conduct Information risk management, incident management and business continuity management.
- Provide administrative and organizational support to assist the IT Director with information security and risk management decisions.

Key responsibilities
- Information Security Policies & Procedures
- Initiate and supervise planning, development, maintenance, and improvement of Information - Security Policies, Standards, Guidelines, Procedures, depending on the maturity level of Information Security program.
- Information Security Awareness
- Initiate, coordinate and supervise security awareness, training and education programs for end-users Spread Information Security Awareness.

Information System Audit
- Initiate and supervise internal and external audits and assessments of the effectiveness of security controls (deployed for managing Physical Access, Access Control, Network & Perimeter, Application Development, Operating Systems, Malicious Code, Legal & Technical Compliance and Change Management).

IT Risk Management
- Conduct periodic Information Security risk assessment, updating Information Asset Profile, identifying vulnerabilities and proposing treatments.

Security Incident Management
- Oversee and manage Information Security incidents.

Information Security
- Maintain information security related to the bank, throughout the period of employment.
- Report or act on any reported potential or actual risks or security incidents as soon as possible.

Documentation / Process Ownership
- Take ownership, maintain & update documented processes or documentation related to his job function. In the event where processes or documentation are shared, be responsible to inform the owner of any document about required changes or improvements.

People Supervisory
- Builds, develops and manages resources to carry-out infrastructure solutions development and implementation.
- Establish objectives with direct reports that align to both business and capability objectives.
- Holds regular meetings with the team and provides results assessments and guidance.
- Develops the team by recommending professional and personal development opportunities.
- Motivates and leads the team; attract, recruit and retain required personnel.
- Empowers others through delegating key tasks/functions; establishes clear understanding of roles and accountabilities, sets clear expectations, providing feedback and guidance, and hold people accountable.

Other
- Provide supervision and professional support to IT Security team
- Perform any other duties assigned by the supervisor directly related or relevant to the job

Ensure the assigned responsibilities are delivered:
- To a high standard of quality and timeliness
- In full compliance with the Quality Policy and the Safety and Security rules and requirements
- In line with any standards and objectives designated in the Employee Performance Management system

Requirements

- BSc in Computer Science, Computer engineering, Math, Information Technology or equivalent experience
- CISSP or relevant certification preferred
- Minimum 14 years in information security field and 5 years in a supervisory or managerial role.

Practitioner level skills in the below mentioned areas :
- Information Security Policies & Procedures
- Information Security Awareness
- Information System Audit
- IT Risk Management
- Security Incident Management
- Experience working in a large organization.
- Experience in managing complex IT projects.
- Experience of building relationships with executive and senior leadership, with a proven ability to influence and collaborate at all levels.
- Strong problem solving and analytical skills, developing creative solutions and meeting project objectives.
- High attention to detail and accuracy
- Flexibility and a related ability to work autonomously
- A team player willing to work on tight timelines and pitch in when needed
- A positive attitude, patience and persistence, especially when dealing with various internal and external stakeholders

About the Company

One of the leading committees in Qatar.