Available Opportunities
VAC7068 - Information Security Manager
Field: General Management Contract Type: Full Time - Permanent
Location: Palestine - Ramallah Closing date: 16-Mar-2018
Role Summary & Duties and Responsibilities:


Duties and Responsibilities

  • Plan, implement and upgrade security measures and controls.
  • Protect digital files and information systems against unauthorized access, modification or destruction
  • Maintain data and monitor security access
  • Manage network, intrusion detection and prevention systems
  • Analyze security breaches to determine their root cause
  • Evaluate and recommend tools and solutions that provide security controls.
  • Actively look for security vulnerabilities in IT and Telecom systems, reporting of any issues and suggest possible solutions.
  • Align information security with business objectives and goals, protecting the integrity, confidentiality and availability of data.
  • Preparing reports detailing security issues, making recommendations and identifying solutions.
  • Preparing information security business plans and long term strategies.
  • Define, implement and maintain corporate security policies.
  • Coordinate security plans with outside vendors
  • Implements security improvements by assessing current situation; evaluating trends; anticipating requirements.
  • Determines security violations and inefficiencies by conducting periodic audits.
  • Document security breaches and assess the damage they cause.
  • Research security enhancements and make recommendations to management.
  • Stay up to date with security news, security standards, latest vulnerabilities and remedies emerging in the field.
  • Conducts security awareness training sessions.

Experience & Qualifications:
  • Bachelor’s degree computer science engineering or related fields.
  • Minimum 7 years of experience in information security or related field, preferred in mobile Telecom companies.
  • Certified Information Systems Security Professional Certification is a must.
  • Having ISO 27001 Information Security Management certification is a plus.
  • Experience with computer network penetration testing and techniques.
  • Thorough understanding in cyber-attacks such as DDOS, hijacking, social engineering and so on.
  • Understanding of main security controls such as firewalls, proxies, SIEM, antivirus, IDPS …etc.
  • Knowledge of computer networks fundamentals, standards, devices and operations.
  • Social engineering – given that humans are the weakest link in the security chain, an analyst’s expertise can help with awareness training
  • Forensics – investigation and analysis of how and why a breach or other compromise occurred
  • Troubleshooting – the skill to recognize the cause of a problem.
  • Problem solving/Analysis.
  • Ability to work with others as a team member.
  • Ability to work under pressure and stress conditions.
  • Ability in resources management and well usage.
  • Ability to learn new things fast and accurate.
  • Ability to work 24/7 and in night.
  • Good communication skills.
  • Proficiency in Arabic and English (oral and written).
Note: you will be required to attach the following:
1. Resume / cv
2. Professional Personal Photo
Share |