MAIN OBJECTIVE OF ROLE

To recommend, develop, and sustain robust cyber security controls within the organization\'s cloud environment by conducting comprehensive security design reviews, identifying areas for improvement, providing practical recommendations, and effectively implementing essential controls and processes.

KEY RESPONSIBILITIES

1. lead and take ownership of initiatives related to security architecture/process design evaluations and enhancements to bolster the overall security posture.

2. Deploys and oversees security controls for cloud-based applications, databases, and infrastructure

3. Performs routine security assessments and audits on cloud resources to detect vulnerabilities and configuration weaknesses.

4. Develops, reviews, and implements Cyber Security policies, processes, guidelines & standards

5. Manages and executes Security Operation Centre processes, which encompass detection and response activities in collaboration with the SOC vendor.

6. Evaluates existing and emerging threats relevant to the organization, suggesting and implementing countermeasures to address any vulnerabilities.

7. Maintains a robust cybersecurity posture within the organization.

8. Guarantees adherence to industry standards, regulations, and internal security policies across both cloud and on-premises environments

9. Works closely with internal and external resources including vendors to address cybersecurity issues in the organization

10. Streamlines operations by automating controls and processes to enhance overall efficiency

11. Reviews vulnerability assessment reports provided by the SOC and collaborates with the IT team to prioritize and remediate identified vulnerabilities

12. Engages in the cyber security incident response process.

MINIMUM QUALIFICATIONS / EXPERIENCE/ KNOWLEDGE / SKILLS

Minimum Education

\xc2\xb7 Bachelor\xe2\x80\x99s Degree (or equivalent)

\xc2\xb7 Engineering in IT/Computer Science

Experience Specific Requirements

\xc2\xb7 Preferred No. of Years (with Relevant Degree) \xe2\x80\x93 6

Systems, Licensing, Language or Certification Requirements

\xc2\xb7 5 to 6 years of experience with the focus on cloud security

\xc2\xb7 Strong understanding of cloud security best practices and experience with cloud service providers (e.g., AWS, Azure, Oracle)

\xc2\xb7 Functional and operational knowledge of various cloud deployments such as M365, AWS, OCI, Azure, etc, with the focus on native cloud security controls

\xc2\xb7 Extensive experience in cyber security operations, including incident response, threat hunting, and vulnerability management.

\xc2\xb7 Good knowledge of Network & System security concepts, solutions, tools & administration

\xc2\xb7 Functional knowledge of security solutions such as Email Security, Vulnerability Management, SIEM, EDR, antimalware , etc

\xc2\xb7 Knowledge of security frameworks, standards, and regulations (e.g., NIST, ISO/IEC 27001, GDPR).

\xc2\xb7 Strong communication and collaboration skills to work effectively with cross-functional teams

\xc2\xb7 CEH, GSEC, CISSP, CCSP, AWS / Azure security architect (any certificate is desirable)

CORE COMPETENCIES

\xc2\xb7 Customer Focus

\xc2\xb7 Team work

\xc2\xb7 Effective Communication

\xc2\xb7 Personal Accountability & Commitment to achieve

\xc2\xb7 Resilience and Flexibility (Can do attitude)

ISR Requirements

Reads and complies with the ISR policies of the Company and diligently reports any weakness or incidents to the respective Line Manager or the Information Security team. Completes all required ISR awareness sessions and follows associated guidelines in the day to day business operations.

Warning on Recruitment Fraud

flydubai is aware of a number of e-mails, letters and SMS or Whatsapp messages in circulation recently, claiming to be offers of employment from flydubai.

These offers often look legitimate and may include job descriptions, salary, and benefit details.

The offers then direct recipients to provide bank account details.

Although these offers may appear genuine, they are fraudulent and should be deleted immediately and not responded to. flydubai does not send emails, letters or other messages requesting your bank account details in order to process documents. flydubai will also never

refer you to a third party to process applications or visas. Official communications from flydubai

will only come from an email address ending in @flydubai.com and job opportunities with

flydubai are advertised on flydubai\'s websites.

If you receive any e-mail, letter or other message which you have not requested or are expecting and it purports to be from flydubai, please contact us at and include the subject line \xe2\x80\x9cRecruitment Fraud\xe2\x80\x9d to confirm the authenticity of the message.

flydubai