Network Security Specialist

Explore more jobs; Bahrain; On-site; BHD 60,000 - 90,000; Full time

Job summary

Batelco in Bahrain seeks an Information Security Governance lead to monitor governance framework, risk management, and awareness initiatives across the organization, ensuring CIA principles and regulatory compliance.

You will oversee audits, vulnerability testing, and incident response coordination, align security programs with the company strategy, and drive encryption, PKI, and disaster recovery efforts.

Responsibilities

• Strategic: Prepare IT security strategies and programs ensuring regulatory compliance, continuity of operations, and CIA of information and resources; align to organization strategy.
• Monitor performance against strategic initiatives and annual budget.
• Oversee information security risk management and audits; ensure awareness across the organization.
• Operational: Review governance framework and its effectiveness across the organization.
• Oversee vulnerability assessment/penetration testing for critical components and applications.
• Monitor IT security logs, IDS/firewall logs and address anomalies.
• Lead corporate information security initiatives (encryption, PKI, IDS, antivirus, disaster recovery).
• Review Audit findings and provide business insights; ensure ISO 27001 regulation adherence.

Job description

Industry Industrial Cybersecurity for OT/ICS and Critical Infrastructure

Job Objective:

Monitor implementation of the governance framework for information security, oversee risk management and awareness initiatives on information security across the organization. Monitor vulnerability assessment and penetration testing, oversee audits and ensure adherence to regulations.

Primary Responsibilities:

Strategic:

• Work closely with the Chief Security Officer to prepare IT security strategies and programs that ensure regulatory and standards compliance, continuity of operations and the confidentiality, integrity, availability, (CIA), audit ability and accountability of information and resources. Ensure alignment to the overall organization strategy
• Monitor performance against the strategic initiatives
• Work closely with the Chief Security Officer to prepare an annual budget
• Monitor and report adherence to the budget, highlight deviations in time

Operational:

• Monitor and review IT security audit information in order to ensure that security policies and controls exist and are being executed properly and sufficiently to meet corporate requirements
• Monitor implementation of the governance framework for information security operations across the organization. Review the governance framework and its effectiveness
• Oversee Information security risk management. Review Risk Registers and Asset Registers for certified areas
• Monitor documentation for information security. Ensure maintenance of Statement of Applicability document, Organizational Context document, Corporate Policy and list of Guidelines
• Monitor information security awareness communications and ensure their circulation across the organization
• Oversee the internal and external Vulnerability Assessment and Penetration Testing for critical Network components and IT Applications following PT and VA Guideline
• Ensure that IT security logs, IDS and/or firewall logs are reviewed, and any reported anomalies are addressed. Periodically review reports on information security issues
• Monitor investigations of any actual or potential information security violations
• Lead corporate wide and departmental Information Security initiatives such as encryption, PKI, intrusion detection, anti-virus protection, monitoring tools, firewalls, disaster recovery, and risk assessments/management, and identify & implement appropriate policies for these initiatives
• Review findings of Information Security Audits and generate relevant business insights
• Monitor adherence to TRA Risk Management Regulation for ISO 27001 Certification
• Review recommendations on the deployment of the latest and emerging technologies in IT security across Batelco's corporate IT infrastructure

People:

• Identify training needs and nominate team members for training programs
• Ensure timely completion of PMR process for self and the team
• Continuously share the knowledge and understanding of the telecom industry and business trends
• Ensure active participation in employee engagement surveys