System Risk Control Analyst

Careers International; Dubai; On-site; AED 300,000 - 520,000; Full time

Job summary

Careers International in Dubai seeks a System Risk Control Specialist to lead information security planning, establish security management processes, and design systems to protect data across the company.

The role requires conducting security assessments, overseeing vulnerability management, guiding incident response, and leading a security team. Proficiency in Linux/Windows, web security, and English/Chinese communication is essential.

Qualifications

• System security experience of 3+ years in enterprise environments.
• Familiar with Linux and Windows OS, and web app servers.
• Experience with security tools, policy formation, and incident handling.
• Knowledge of web vulnerabilities (SQLi, XSS) and defense strategies.
• Strong English and Chinese language skills.

Responsibilities

• Develop and implement information security planning and management processes.
• Oversee security assessments and implement recommended security solutions.
• Lead vulnerability management and monitor industry trends for new threats.
• Perform penetration testing and contribute to incident response planning.
• Lead the security team and provide training and development.

Skills

System security

Linux

Windows

Web application security

IDS/IPS

Policy formulation

Incident handling

Penetration testing

Tools

IDS/IPS

Job description

We are seeking a highly skilled and experienced System Risk Control Specialist to join our Information Security team. The successful candidate will be responsible for overseeing the company's overall information security planning, establishing security management system processes, designing and implementing systems, conducting security assessments, and leading efforts to identify and mitigate security vulnerabilities. This role is crucial in ensuring the integrity, confidentiality, and availability of our information systems.

Key Responsibilities:

• Information Security Planning and Management:
  • Develop and maintain comprehensive information security strategies and policies.
  • Establish and oversee security management system processes to ensure robust protection of company data.
  • Design and implement effective security systems to safeguard information assets.
• Security Assessments and Solutions Implementation:
  • Conduct thorough security assessments on systems, networks, and servers.
  • Collaborate with relevant teams to implement recommended security solutions and track progress.
  • Promote the execution of security measures and ensure compliance with industry standards.
• Vulnerability Management:
  • Monitor industry trends for security vulnerabilities and patch information.
  • Assess risks associated with identified vulnerabilities and submit detailed risk reports.
  • Proactively address and mitigate risks related to security facilities.
• Penetration Testing and Incident Response:
  • Perform penetration testing and identify potential system intrusions.
  • Develop and manage alarms and trace analysis protocols.
  • Implement measures to prevent and respond to security breaches.
• Team Leadership and Development:
  • Lead the information security team, including personnel planning and guidance.
  • Provide training and development opportunities to enhance team capabilities.
  • Improve and maintain the team’s document knowledge reserves.

Requirements

• System security, computer application related major, more than 3 years of system security experience
• Familiar with Linux, Windows operating systems, WEB application servers and other related security policies and procedures
• Familiar with mainstream security tools and technologies, IDS/IPS, etc., and have practical experience in policy formulation and incident handling
• Familiar with web security attack and defense, system penetration testing
• Have a strong interest in vulnerability discovery and be familiar with common web vulnerability principles such as SQL injection, XSS, etc.
• Proven expertise in security assessment, vulnerability management, and penetration testing.
• Have strong language skills in Chinese/English