Introduction

As the implementation phase of Buna, formerly known as the Arab Regional Payment System (ARPS), project picks up momentum, we are looking for a responsible  Information Security Officer- Buna to join our founding team. Duties of the Information Security Officer include developing and managing Buna’s information security policies & strategy to protect Buna from security threats and cyber-attacks. The job holder is also responsible for ensuring operational compliance with all standards and regulations and driving business continuity. This position will report to the Chief Risk & Compliance Officer.

In this context, the following sections detail the main qualifications, skills and responsibilities related to this position:

Job Responsibilities

Cyber Security Policies and PRocedures Development

• Develop and monitor a strategic, comprehensive enterprise information / cyber security risk management program (including strategy, policies, standards, processes, and guidelines) to ensure protection of Buna digital and data assets
• Create, maintain and publish up-to-date information security policies, standards and guidelines
• Ensure cyber security policies, procedures and best practices are communicated across the organization

Security Operations Implementation

• Implement and lead the strategy for managing and reporting security incidents and oversee investigations of reported security breaches
• Identify, manage, and minimize information security risks, and provide relevant and timely reports that drive business decisions
• Ensure appropriate administrative, physical and technical safeguards are in place to protect information assets from internal and external threats
• Identify, introduce and implement appropriate procedures to test technical safeguards on a regular basis
• Oversee the development and implementation of appropriate and effective controls to mitigate identified threats and risks
• Align the security and enterprise (reference) architectures, ensuring security requirements are implicit in these architectures
• Manage the daily operations for InfoSec architecture, engineering, operations center, secure development lifecycle, and governance functions across on-premise, hybrid cloud, and cloud capabilities

Information Security Program Management

• Report regularly on current status of the information security program
• Keep abreast of latest cybersecurity technologies and innovations
• Create and manage a targeted information security awareness training program
• Manage InfoSec vendor relationships and optimizing value from these relationships
• Research, investigate and implement measures that address data security risks and potential losses

Identity and Access Management

• Monitor and maintain application user access across the IT portfolio
• Maintain on time on-boarding and off-boarding for identified IT environments

Cybersecurity Incident Mitigation

• Follow-up on detected security issues and implement solutions to mitigate risks
• Oversee threat monitoring activities, take preventive actions and advise relevant stakeholders on the appropriate course of action and response to such threats
• Own the cybersecurity incident and vulnerability management processes from design to implementation

Threat Analysis and Monitoring

• Oversee incident response planning as well as the investigation of security breaches, and assist with disciplinary and legal matters

Job Details

Preferapply-d Candidate

Apply Now