Cyber Security Specialist

Gender; Oman; On-site; OMR 12,000 - 18,000; Full time

Job summary

Gender in Oman seeks an experienced cybersecurity professional to protect the bank's digital assets, implement controls, and lead incident response.

The role requires 3–5 years of experience, a Bachelor's degree (Master's preferred), and hands-on use of firewalls, IDS/IPS, encryption, SIEM, and VPNs.

Qualifications

• Bachelor's degree in a relevant discipline.
• Master's degree preferred.
• 3 to 5 years of relevant experience.
• Strong knowledge of cyber threats, vulnerabilities and security best practices.
• Experience with security tools and technologies (firewalls, IDS/IPS, data encryption).
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• This position requires a medium level of business understanding.

Responsibilities

• Monitor security systems and network activity to detect threats.
• Analyze incidents, root cause, and propose mitigations.
• Implement and maintain controls such as firewalls, IDS/IPS, encryption.
• Develop and document security policies and procedures.
• Stay updated on cyber threats and inform leadership.
• Conduct security awareness training for employees.
• Perform vulnerability assessments and penetration testing.
• Lead incident response with IT, legal, and authorities.
• Prepare regular security reports for the Chief Risk Officer.
• Promote a culture of security awareness.

Skills

Cybersecurity

Analytical skills

Problem solving

Communication skills

Team collaboration

Business understanding

Education

Bachelor's degree

Master's degree preferred

Tools

Firewalls

IDS/IPS

Data encryption

WAF

SIEM/SOAR

VPNs

Patch Management

Job description

JOB CONTENT To protect the bank's digital assets and information systems from cyber threats. To implement and maintain robust cybersecurity measures, identify and mitigate vulnerabilities, and ensure compliance with security regulations.

2. Duties and Responsibilities

1. Operational:

Monitor network activity and security systems to identify potential cyber threats and vulnerabilities.

Analyze security incidents, investigate their root cause, and recommend appropriate mitigation strategies.

Implement and maintain effective security controls, including firewalls, intrusion detection/prevention systems, and data encryption solutions.

Configure and / or manage security systems such as firewalls, WAF, VPNs, sandboxes, MAMMDM, email security, antivirus, antimalware, and IDS/IPS, SIEM/SOAR, remote access, sandboxes, Patch Management, Security of Wireless Controller, solutions.

Develop and document security policies and procedures to ensure best practices are followed by all bank personnel.

Stay informed of the latest cyber threats and trends, keeping the chief risk officer and IT department updated on evolving risks.

Conduct regular security awareness training sessions for employees to educate them on cyber threats and best practices for protecting information.

Conduct regular vulnerability assessments and penetration testing to identify and address weaknesses in the bank's IT infrastructure.

Work with IT teams to prioritize and remediate vulnerabilities in a timely and effective manner.

Develop and implement an incident response plan to effectively respond to cyberattacks and minimize potential damage.

Lead incident response activities, coordinating with IT teams, legal department, and external authorities (if necessary) to investigate and contain security breaches.

Conduct post-incident reviews to identify lessons learned and improve future preparedness.

Prepare regular reports on security threats, vulnerabilities, and incident response activities for chief risk officer.

Develop and conduct security awareness training programs to educate employees on cybersecurity best practices, including phishing scams, password hygiene, and social engineering tactics.

Promote a culture of security awareness within the bank by encouraging employees to report suspicious activity.

Perform any other relevant task assigned from time to time by the manager / management.

KEY INTERACTIONS

Internal All internal department and branches As per operational activities

External Vendors, Service Providers, Consultants As part of operational activities

Level of external interaction This position requires a low level of external interaction

Desired Candidate Profile

• Bachelor's degree in relevant discipline.
• Preferred: Master's degree in relevant discipline.
• 3 to 5 years of experience in relevant discipline.
• Strong understanding of cyber threats, vulnerabilities, and security best practices.
• Experience with security tools and technologies (firewalls, IDS/IPS, data encryption).
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills to collaborate effectively with IT teams, management, and other departments.
• Ability to work independently and as part of a team.
• Excellent written and verbal communication skills.
• This position requires a medium level of business understanding