Network Security Specialist Full Time

Job Objective:

Monitor implementation of the governance framework for information security, oversee risk management and awareness initiatives on information security across the organization. Monitor vulnerability assessment and penetration testing, oversee audits and ensure adherence to regulations.

Strategic

Primary Responsibilities:

• Work closely with the Chief Security Officer to prepare IT security strategies and programs that ensure regulatory and standards compliance, continuity of operations and the confidentiality, integrity, availability, (CIA), audit ability and accountability of information and resources. Ensure alignment to the overall organization strategy
• Monitor performance against the strategic initiatives

Financial

• Work closely with the Chief Security Officer to prepare an annual budget
• Monitor and report adherence to the budget, highlight deviations in time

Operational

• Monitor and review IT security audit information in order to ensure that security policies and controls exist and are being executed properly and sufficiently to meet corporate requirements
• Monitor implementation of the governance framework for information security operations across the organization. Review the governance framework and its effectiveness
• Oversee Information security risk management. Review Risk Registers and Asset Registers for certified areas
• Monitor documentation for information security. Ensure maintenance of Statement of Applicability document, Organizational Context document, Corporate Policy and list of Guidelines
• Monitor information security awareness communications and ensure their circulation across the organization
• Oversee the internal and external Vulnerability Assessment and Penetration Testing for critical Network components and IT Applications following PT and VA Guideline
• Ensure that IT security logs, IDS and/or firewall logs are reviewed, and any reported anomalies are addressed. Periodically review reports on information security issues
• Monitor investigations of any actual or potential information security violations
• Lead corporate wide and departmental Information Security initiatives such as encryption, PKI, intrusion detection, anti-virus protection, monitoring tools, firewalls, disaster recovery, and risk assessments/management, and identify & implement appropriate policies for these initiatives
• Review findings of Information Security Audits and generate relevant business insights
• Monitor adherence to TRA Risk Management Regulation for ISO 27001 Certification

Review recommendations on the deployment of the latest and emerging technologies in IT security across Batelco’s corporate IT infrastructure

People

• Identify training needs and nominate team members for training programs
• Ensure timely completion of PMR process for self and the team
• Continuously share the knowledge and understanding of the telecom industry and business trends
• Ensure active participation in employee engagement surveys

Skills Description

Required Qualifications and Experience:

Qualifications

Bachelors’ degree in Computer Science, Information Systems or related field

Experience

• 3-6 years’ experience in computer / network security or systems administration.
• Experience in Information Systems (IT), with a substantial proportion gained in a Telco/PTT business environment.
• Experience in the provision, development, implementation, operation and support of business application systems and/or IT Security systems for large organizations.
• Experience of technical activities relevant to Information and IT Security.
• Fluency with a wide range of modern PC desktop applications and utilities.

Certifications

• CISSP or CISA certification is preferred.