Preparing, developing and implementing information security programs, policies and guidelines to ensure that the company departments implement appropriate preventive measures and manage any activities to maintain the availability, integrity and confidentiality of information sources with the company, manage incidents of information security breaches, and ensure that the company is made aware of the implications of digital security threats.
Functional responsibilities
Developing and maintaining information security programs, policies and guidelines within the body designed to protect the authoritys communication, systems and infrastructure assets from internal and external threats.
Implementing alignment with the companys internal IT function to anticipate potential security threats , including measures and control of potential security risks from THE companys IT operations
Implement periodic audit of information security by ensuring that all new vulnerabilities are identified and addressed, and that all existing vulnerabilities are subject to effective preventive measures
Ensure that awareness and training sessions are coordinated to ensure that the sectors are ready against potential digital security threats by enhancing awareness and understanding of the potential impacts of any breaches
Ensure that cooperation with risk response and business continuity is implemented within the company to ensure that risk mitigation plans and business continuity plans are comprehensive for the information security perspective when needed
Implement the management of the comprehensive requirements imposed by digital security incidents to which the company is exposed in coordination with the relevant authorities as needed and ensure that adequate prevention measures are applied to prevent future breaches
Implement development efforts or adopt solutions that will prevent or reduce exposure to digital security threats as needed by departments
Push search and intelligence activities within the Office to keep up with the latest information security threats, hacking methodologies, and security breaches exploitation information
Ensure that relevant information security policies and procedures are harmonized and implemented within the departments activities
Develop skills and transfer knowledge to the team
Implementing and applying the security assessment process to the agencys systems and ensuring that security vulnerabilities are subject to effective preventive measures
Requirements
Academic qualifications
Bachelors degree in information security in any field related to a specialized certificate (i.e. CISSP, CISM, ISO27001 ISMS Lead Auditor and Offensive Security Certified Professional (OSCP)
Professional experience
Experience in information security, digital security or any relevant area so that at least:
Years of experience for bachelors degree holders: 6 to 8 years