Senior Officer - Information Security

n Inv; Kuwait; On-site; KWD 12,000 - 24,000; Full time

Job summary

National Investments Company is seeking a Senior Officer of Information Security to protect NIC’s assets, systems and data. The role covers security monitoring, incident response, vulnerability management, risk assessment and governance support.

The candidate will review logs, coordinate incident responses and help maintain compliance while driving secure digital transformation across NIC's platforms. Strong collaboration with technical and business teams is essential.

Qualifications

• Bachelor's degree in Computer Science, Information Systems or related field.
• Strong understanding of information security principles, cybersecurity threats and security controls.
• Knowledge of cybersecurity frameworks and their application to security assessments, risk management and compliance.
• Proficiency in security monitoring tools, including SIEM and endpoint security solutions.
• Knowledge of VA/PT, including reviewing findings and remediation.
• Understanding of incident response processes and escalation of security incidents.
• Knowledge of access management and controls to prevent unauthorized access.
• Strong understanding of OS, networking, web technologies, security and encryption.
• Knowledge of information security risk assessment and mitigation techniques.
• Ability to analyze security logs and communicate findings clearly.
• Strong analytical, problem-solving and interpersonal skills.
• Ability to work independently and coordinate with teams.
• Proactive in learning new technologies and improvements.

Responsibilities

• Monitor security logs and alerts using SIEM and endpoint security tools to identify threats.
• Support incident response plans and coordinate containment, recovery and corrective actions.
• Support vulnerability assessments and remediation follow-up.
• Review application permissions and user access rights to prevent unauthorized access.
• Assess information security risks and recommend protective controls.
• Support regulatory compliance and audits by maintaining security documentation and evidence.
• Contribute to information security policies, procedures and assessments for new systems.
• Deliver employee security awareness activities and propose improvements.

Skills

Information security

Incident response

Risk assessment

Regulatory compliance

Security governance

Threat monitoring

Access management

Vulnerability management

Security policies

Audits

Education

Bachelor’s degree in Computer Science, Information Systems or related field

Tools

SIEM

Endpoint security solutions

VA/PT

Incident response

Access controls

Risk assessment techniques

Compliance frameworks

Job description

The Senior Officer of Information Security will help protect NIC’s information assets, systems and data from unauthorized access, disclosure, disruption, modification or destruction. The role combines security monitoring, incident response, vulnerability management, risk assessment and support for information security governance and regulatory compliance. Responsibilities include reviewing security logs, investigating suspicious activity, coordinating responses to security incidents and following up on identified vulnerabilities. The role will also support application access controls, security assessments, audit requirements and employee security awareness, while recommending improvements to support secure digital transformation.

The role

Roles and responsibilities

• Monitor security logs and alerts using SIEM and endpoint security tools to identify, investigate and elevate potential threats.
• Support incident response plans and coordinate incident containment, recovery and corrective actions, maintaining clear records.
• Support vulnerability assessments and penetration testing, review findings and follow up on remediation.
• Review application permissions and user access rights to help prevent unauthorized access.
• Assess information security risks and recommend controls to protect NIC’s systems, applications and data.
• Support regulatory compliance and audits by maintaining security documentation, providing evidence and tracking corrective actions.
• Contribute to information security policies, procedures and assessments for new systems and digital initiatives.
• Deliver employee security awareness activities and recommend improvements based on emerging threats and technologies.

Candidate profile

Special Skills & Knowledge

• Bachelor’s degree in Computer Science, Information Systems or a related field.
• Strong understanding of information security principles, cybersecurity threats and security controls.
• Knowledge of cybersecurity frameworks and their application to security assessments, risk management and compliance.
• Proficiency in security monitoring tools, including Security Information and Event Management (SIEM) and endpoint security solutions.
• Knowledge of vulnerability assessment and penetration testing (VA/PT), including reviewing findings and following up on remediation.
• Understanding of incident response processes, including identifying, investigating, documenting and escalating security incidents.
• Knowledge of application permissions, user access management and controls to prevent unauthorized access.
• Strong understanding of operating systems, networking, web technologies, security and encryption.
• Knowledge of information security risk assessment and mitigation techniques.
• Ability to analyse security logs, identify suspicious activity and communicate findings clearly.
• Strong analytical, problem-solving and interpersonal skills.
• Ability to work independently and coordinate effectively with technical and business teams.
• A proactive approach to learning new technologies and identifying security improvements.

Candidate profile

What we are looking for

Application deadline 18 November 2026

Diversity and inclusion

Every candidate is welcome

We promote equal opportunity and value the individual experience, perspective and potential each person brings.