Senior Information Security Officer

Responsibilities

Security Monitoring: Monitor systems, networks, and applications for security incidents. Actively monitor SIEM logs, EDR alerts, and investigate suspicious activities or potential threats. Incident Response: Support incident response and recovery activities, from containment to full eradication. Prepare detailed incident reports and recommend corrective actions. Vulnerability & Risk Management: Conduct risk assessments, track vulnerabilities, and oversee Vulnerability Assessment & Penetration Testing (VAPT) activities to ensure timely remediation. Governance & Compliance: Maintain and update information security policies and procedures. Support the implementation of security KPIs and ongoing compliance monitoring. Access Control: Assist in regular user access reviews and strictly enforce the principle of least privilege across all systems. Security Awareness: Develop and execute security awareness initiatives to educate staff on emerging risks and best practices.

Desired Candidate Profile

Education: Bachelor's degree in Computer Science, Cybersecurity, or IT Qualifications: CISSP, CISM, CEH, or GCIH preferred. Industry Experience: Enterprise IT Security, SOC, or GRC. Banking/fintech, telecom, or government a plus. Years of Experience: 2-5 years in information security operations. Technical Skills & Tools: SIEM (Splunk, QRadar, or Sentinel), EDR (CrowdStrike or SentinelOne), vulnerability scanning (Nessus or Qualys), ISO 27001 and NIST. Language Proficiency: Fluent Arabic and English, written and spoken.