وظيفة مهندس أمن سيبراني لدى IT Security Training & Solutions - I(TS)² في الرياض

Job Description:

Secures enterprise information by determining security requirements; planning, implementing, and testing security systems; preparing security standards, policies, and procedures; mentoring team members. Expected to have a thorough understanding of complex IT & security systems and stay up to date with the latest security standards, systems and authentication protocols, as well as best practice security products.

Responsibilities:

In addition to anticipating possible security threats and identifying areas of weakness in a network system, a Security Architect must respond promptly and effectively to possible breaches of security. Additional responsibilities include:

·Reviewing current system security measures and recommending and implementing enhancements

·Conducting regular system tests and ensuring continuous monitoring of network security

·Developing project timelines for ongoing system upgrades

·Establishing disaster recovery procedures and conducting breach of security drills

·Promptly responding to all security incidents and providing thorough post-event analyses

• Cultivates a culture of security awareness, and arranging continuing education of personnel to ensure security policies are adhered to at all times.
• Create solutions that balance business requirements with information and cyber security requirements
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
• Enhances security team accomplishments and competence by planning delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members.
• Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates.
• Plans security systems by evaluating network and security technologies; developing requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related security and network devices; designs public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures as well as hardware and software; adhering to industry standards.
• Implements security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation.
• Verifies security systems by developing and implementing test scripts.
• Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.
• Upgrades security systems by monitoring security environment; identifying security gaps; evaluating and implementing enhancements.
• Prepares system security reports by collecting, analyzing, and summarizing data and trends.
• Updates job knowledge by tracking and understanding emerging security practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations.
• Enhances department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.

Experience & Skills:

·10+ years in Cyber Security with 4+ years in similar role

·Extensive experience in information security and/or IT risk management with a focus on security, performance and reliability

·Solid understanding of security protocols, cryptography, authentication, authorisation and security

• Security architecture, demonstrating solutions delivery, principles and emerging technologies - Designing and implementing security solutions. This includes continuous monitoring and making improvements to those solutions, working with an information security team.
• Consulting and engineering in the development and design of security best practices and implementation of solid security principles across the organization, to meet business goals along with customer and regulatory requirements.
• Security considerations of cloud computing: They include data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss and DoS attacks.

·Identity and access management (IAM) - the framework of security policies and technologies that limit and track the access of those in an organization to sensitive technology resources.

·Good working knowledge of current IT risks and experience implementing security solutions

·Experience implementing multi-factor authentication, single sign-on, identity management or related technologies

·Ability to interact with a broad cross-section of personnel to explain and enforce security measures

·Excellent written and verbal communication skills as well as business acumen and a commercial outlook

• Strong critical thinking and analytical skills
• Strong leadership, project and team-building skills, including the ability to lead teams and drive projects and initiatives in multiple departments
• Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects
• The ability to be the enterprise security subject matter expert who can explain technical topics to those without a technical background

Education:

• Bachelor’s degree ideally in Computer Science or Cyber Security. Masters in Cyber Security preferred.

Certifications:

• Must Have: SABSA (Sherwood Applied Business Security Architecture) and CISSP (Certified Information Systems Security Professional) certifications.
• Optional: TOGAF, Zachman Framework, CISM, CISA, Information Systems Security Architecture Professional (ISSAP), Information Systems Security Engineering Professional (ISSEP)

Languages: English - business fluent. Arabic a plus.