Information Security Manager PayTabs Information Security Manager

PayTabs Group; Dubai; On-site; AED 180,000 - 250,000; Full time

Job summary

A leading company in the payment gateway sector is seeking a Security Manager in Dubai. The ideal candidate will have extensive experience in managing information security practices, conducting vulnerability assessments, and ensuring compliance with security standards. Join a forward-thinking organization and contribute to enhancing their security profile.

Qualifications

• At least +5 years of experience in information security or similar roles.
• Security certificate such as CISSP, CISM, OSCP, CEH is a plus.
• Previous experience in a payment gateway or banking facility is a plus.

Responsibilities

• Develop and implement information security policies and procedures.
• Manage real-time security threats and incidents.
• Conduct vulnerability and penetration testing exercises.

Skills

Penetration testing

Vulnerability assessment

Information security governance

Scripting (PHP, JAVA, Go)

Bash scripting

Security compliance

Education

Bachelor’s degree in computer science or equivalent

Tools

WAF

IPS

SIEM

LDP

Job description

• Develop, maintain and implement information security policies, procedures, controls and guidelines.
• Monitor and manage security infrastructure such as firewalls, IDS / IPS, and system logs.
• Perform regular health monitoring, upgrades and maintenance.
• Manage real time security threats & incidents to identify and quarantine threats.
• Assist in process, assessment and implementation of annual PCI DSS certification.
• Coordinate and Conduct periodic Vulnerability and Penetration Testing exercises.
• Co-ordinate with other departments and address their requirements regarding security compliance.
• Provide security awareness & secure code training.
• Recommend and ensure the implementation of defensive functions (e.g., encryption, access control, and identity management) to reduce systems exploitation opportunities.
• Provide recommendations for security gaps mitigation.
• Productively evaluate and recommend new security technologies that can enhance company information security.
• Manage incident response (IT / Information Security) and support systems.
• Review infrastructure technology vendor contracts and risk assessment.
• Monitor & review firewall rules and configuration.
• Respond to security breaches and network emergencies as necessary.
• Document all support and maintenance activities in accordance with internal policies.
• Responsible for maintaining and updating the Information Security Risk Register.
• Assist in the development, testing, and maintenance of the organization’s business continuity and disaster recovery plans from a security perspective
• Conduct security due diligence on third-party vendors and partners; evaluate contractual terms and SLAs to ensure security requirements are met.
• Strong knowledge in penetration testing & Vulnerability assessment, using industry-standard tools and methodologies.
• Have good experience in programming / scripting language at least in of the following : PHP, JAVA, or Go.
• Have good experience in bash scripting.
• Have good experience in code review with ability to identify and remediate code-level vulnerabilities.
• Implementation experience with security solutions such as : WAF, IPS, SIEM, LDP.
• Good knowledge of the top 10 OWASP application security risks and mitigation techniques.
• Good knowledge of PCI DSS standard and experience participating in audits and remediation processes.
• Haveknowledge of mobile applications security assessment.
• Strong knowledge of internet standards and protocols including TCP / IP.
• Strong skills in information security governance, including policy development, procedure writing, and risk documentation.

Preferred Education and Experience

• Bachelor’s degree in computer science or equivalent.
• At least +5 years of experience in information security / security engineeringor similar roles.
• Security Certificate in security field such as (CISSP, CISM, OSCP, CEH – Security+,CCNA) is a plus.
• Previous experience working in a payment gateway of banking facility is a plus.

J-18808-Ljbffr

Security Manager • Dubai, Dubai, United Arab Emirates