MANAGER - CYBERSECURITY ASSURANCE

Oman Arab Bank; Muscat; On-site; OMR 15,000 - 20,000; Full time

Job summary

A financial institution in Muscat is seeking an experienced information security professional to ensure the operational environment remains secure and compliant with security policies. The ideal candidate will conduct security assessments, manage incidents, and stay abreast of information security trends. Strong communication and leadership skills are essential for this role, along with a degree in Information Security or IT and various professional certifications.

Qualifications

• 6 to 10 years of relevant experience.

Responsibilities

• Provide periodic and on-demand security assessment to IT infrastructures.
• Report violations to security policies and provide recommendations.
• Perform Red Team activity to systems/applications.
• Log InfoSec related incidents and manage incident log.
• Conduct research on information security trends.
• Liaise with teams to deploy security controls.
• Support security incident responses requiring analysis.
• Conduct threat hunting to identify organization threats.
• Participate in security related initiatives and projects.
• Ensure alignment with regulatory and compliance frameworks.

Skills

Leadership Skills

Effective Communication

Strong Risk Analysis

Attention to Details

Problem-Solving

Coordination

Teamwork

Reporting

Research

Assessment

Sound Arabic & English

Linux

Programming (Python, Java, PHP)

Education

Degree in Information Security/IT or equivalent

Preferred Professional Information Security Certification or equivalent

OSCP

CRTP

ITIL v3

CCNA

CEH

Web Application Penetration Testing

Job description

Purpose and Summary:

To ensure the operational environment remains secure and in line with approved security policy.

Key Deliverables:

• Provide periodic and on-demand security assessment (VAPT) to IT infrastructures, systems, applications, Wi-Fi, mobile applications (Android & IOS) and websites.
• Report any violation to approved security policies and provide recommendations.
• Perform Red Team activity to systems/applications.
• Logs all InfoSec related Incidents and track for closure of the incidents - manage and maintain Incident log Register.
• Conduct research and gain awareness of latest information security trends.
• Liaise with different team members to deploy security controls recommended by vendors and Information security team.
• Support of security incident responses that require to have further security analysis.
• Conduct threat hunting to identify threats in the organization.
• Participate in information security related initiatives and projects as assigned or other duties as assigned.
• Ensure alignment with regulatory and compliance frameworks.

Qualifications:

• Degree in Information Security/IT or equivalent.
• Preferred Professional Information Security Certification or equivalent
• OSCP
• CRTP
• ITIL v3 (Information Technology Information Library)
• CCNA
• CEH (Certified Ethical Hacking)
• Web Application Penetration Testing

Skills/Knowledge:

• Leadership Skills
• Effective Communication skills.
• Strong Risk Analysis skills.
• Attention to Details.
• Problem-Solving skills.
• Coordination skills.
• Teamwork skills.
• Reporting skills.
• Research skills
• Assessment skills.
• Sound Arabic & English Languages skills.
• Linux skills
• Programming skills (e.g. Python, Java, PHP…etc).

Experience:

6 to 10 years of relevant experience.