Cyber Security Specialist

Oman Investment Authority; Oman; On-site; OMR 30,000 - 50,000; Full time

Job summary

Oman Investment Authority is looking for a Cybersecurity professional to protect the bank's digital assets. The role includes monitoring network activities, analyzing security incidents, and overseeing cybersecurity training.

The ideal candidate will have experience in cybersecurity, excellent analytical skills, and the ability to communicate effectively with various stakeholders. A Bachelor's degree and relevant experience are required.

Qualifications

• 3 to 5 years of experience in a relevant discipline.
• Strong understanding of cyber threats, vulnerabilities, and security best practices.
• Ability to work independently and as part of a team.

Responsibilities

• Monitor network activity and security systems to identify potential cyber threats.
• Analyze security incidents and recommend mitigation strategies.
• Conduct regular security awareness training sessions for employees.

Skills

Cybersecurity best practices

Security tools and technologies

Analytical and problem-solving skills

Strong communication skills

Education

Bachelor's degree in a relevant discipline

Master's degree in a relevant discipline

Tools

Firewalls

IDS/IPS

Data encryption

Job description

Job Purpose

Protect the bank's digital assets and information systems from cyber threats, implement and maintain robust cybersecurity measures, identify and mitigate vulnerabilities, and ensure compliance with security regulations.

Duties and Responsibilities

• Monitor network activity and security systems to identify potential cyber threats and vulnerabilities.
• Analyze security incidents, investigate their root cause, and recommend appropriate mitigation strategies.
• Implement and maintain effective security controls, including firewalls, intrusion detection and prevention systems, and data encryption solutions.
• Configure and manage security systems such as firewalls, WAF, VPNs, sandboxes, MAM/MDM, email security, antivirus, antimalware, IDS/IPS, SIEM, SOAR, remote access, patch management, and security of wireless controller solutions.
• Develop and document security policies and procedures to ensure best practices are followed by all bank personnel.
• Stay informed of the latest cyber threats and trends, keeping the chief risk officer and IT department updated on evolving risks.
• Conduct regular security awareness training sessions for employees to educate them on cyber threats and best practices for protecting information.
• Conduct regular vulnerability assessments and penetration testing to identify and address weaknesses in the bank's IT infrastructure.
• Work with IT teams to prioritize and remediate vulnerabilities in a timely and effective manner.
• Develop and implement an incident response plan to effectively respond to cyberattacks and minimize potential damage.
• Lead incident response activities, coordinating with IT teams, the legal department, and external authorities if necessary to investigate and contain security breaches.
• Conduct post‑incident reviews to identify lessons learned and improve future preparedness.
• Prepare regular reports on security threats, vulnerabilities, and incident response activities for the chief risk officer.
• Develop and conduct security awareness training programs to educate employees on cybersecurity best practices, including phishing scams, password hygiene, and social engineering tactics.
• Promote a culture of security awareness within the bank by encouraging employees to report suspicious activity.
• Perform any other relevant tasks assigned from time to time by the manager or management.

Key Interactions

• Internal: All internal departments and branches as per operational activities.
• External: Vendors, service providers, and consultants as part of operational activities.

Qualifications

• Bachelor's degree in a relevant discipline. Preferred: Master's degree in a relevant discipline.
• 3 to 5 years of experience in a relevant discipline.
• Strong understanding of cyber threats, vulnerabilities, and security best practices.
• Experience with security tools and technologies (firewalls, IDS/IPS, data encryption).
• Excellent analytical and problem‑solving skills.
• Strong communication and interpersonal skills to collaborate effectively with IT teams, management, and other departments.
• Ability to work independently and as part of a team.
• Excellent written and verbal communication skills.
• This position requires a medium level of business understanding.