Senior Information Security Auditor

HealthCare Dynamics Gen. Trading Company W.L.L; Kuwait City; On-site; KWD 15,000 - 30,000; Full time

Job summary

An established industry player is seeking a skilled IT Security Auditor to lead comprehensive audits and ensure compliance with security regulations. This role involves conducting risk assessments, developing incident response plans, and educating employees about best practices in information security. The ideal candidate will possess a relevant university degree, professional qualifications, and at least five years of experience in the field. Join a forward-thinking company committed to enhancing its security posture and fostering a culture of cybersecurity awareness. If you are passionate about safeguarding information and driving continuous improvement in security practices, this opportunity is perfect for you.

Qualifications

• 5+ years of experience in IT audit or Information Security Audit.
• Relevant degree and professional qualifications in Information Security.

Responsibilities

• Lead comprehensive IT security audits and assess security controls.
• Develop incident response plans and conduct forensic investigations.
• Educate employees on security policies through awareness programs.

Skills

IT Security Audits

Risk Assessment

Compliance Monitoring

Incident Response

Security Awareness Training

Security Controls Evaluation

Documentation Skills

Team Leadership

Stakeholder Management

Education

University Degree in Information Security

Professional Qualifications in Information Security

Job description

Job Responsibilities

• Conducting IT and security audits: Lead and perform comprehensive IT security audits to evaluate the effectiveness of an organization's information security controls and measures. This involves assessing security policies, procedures, systems, and practices.
• Risk assessment: Identify and analyze potential security risks and vulnerabilities within an organization's information systems. Develop risk mitigation strategies, recommend remediation plans, and implement necessary controls to minimize risks.
• Compliance monitoring: Ensure that the organization complies with relevant security regulations, standards, and best practices such as ISO 27001, NIST, GDPR, etc. Keep track of regulatory changes and update security policies and procedures accordingly.
• Security incident response: Develop and implement incident response plans to address and resolve security breaches, incidents, or violations. Conduct forensic investigations, collect evidence, and provide reports on the findings.
• Security awareness and training: Develop and deliver security awareness programs and training sessions to educate employees about information security policies, procedures, and best practices. Promote a culture of security awareness and help create a cybersecurity-conscious workforce.
• Security controls evaluation: Evaluate the implementation and effectiveness of security controls such as access controls, encryption mechanisms, firewall configurations, intrusion detection systems, and other security technologies. Identify gaps or weaknesses and recommend improvements.
• Security documentation and reporting: Prepare detailed audit reports, documenting findings, recommendations, and remediation plans. Maintain accurate audit records and ensure compliance with documentation standards.
• Continuous improvement: Stay updated with the latest trends, technologies, and practices in information security. Continuously improve auditing methodologies, tools, and frameworks to enhance the effectiveness and efficiency of the audit process.
• Team leadership and collaboration: Provide guidance, support, and mentorship to junior auditors.
• Communication and stakeholder management: Effectively communicate audit findings, risks, and recommendations to stakeholders.

Job Requirements

• Relevant University Degree in Information Security or Information Technology.
• Professional Qualifications in Information Security.
• Minimum 5 Years of Experience in IT audit or Information Security Audit.
• Have a Valid Transferrable Visa in Kuwait.

About Boubyan Consulting

We are offering the following services to clients: Internal Audit, Risk Management, Corporate Governance, Internal Controls review and assessment, Regulatory Compliance Advisory Services, Management Consulting, and Training.