Job Title: IT Security Assurance & Controls -Team lead

Only for UAE National

Location: Abu Dhabi

Experience: Min 7 Years

Language: Arabic, English

Education: Bachelor\'s Degree

General Summary

Develop, implement, and monitor a strategic, comprehensive information security and technology risk management program to ensure that the integrity, confidentiality, and availability of information is owned, controlled, or processed by the Solutions+.
Execute technology risk assessment exercises and reports on findings, consults on remediation plans, tracks status, aggregate results, and report to Management. Analyze requirements regarding applicable security disciplines (physical, Application, Infrastructure, data).
Develop, maintain, and publish up-to-date information security policies, standards, and guidelines. Oversee the approval, training, and dissemination of security policies and practices.
Create and manage information security and risk management awareness training programs for all employees, contractors, and approved system users.
Lead the efforts to migrate or integrate security services in Cloud SaaS, Paas and IaaS services.
Conduct security architecture due diligence on new applications and client network prior to service onboarding.
Maintain controls documentation with SMEs and ensure compliance with Internal and External Audit.
Manage security issues and incidents and participate in problem and change management forums.
Monitor the external threat environment for emerging threats and advise relevant stakeholders on the appropriate courses of action.

Performs deep-dive controls testing for high-risk areas for independent validation of issues and remediation efforts Monitor and review periodic vulnerability across infrastructure; Coordinate with technology leads and mitigate the identified vulnerability.

Develop and oversee effective disaster recovery policies and standards to align with business continuity management program goals. Ensure that business-critical services are recovered in the event of a security event.
Work with various stakeholders to identify information asset owners to classify data and systems as part of a control framework implementation.

Sundus Gulf