Manager IT Security

Tawteen; Muscat; On-site; OMR 25,000 - 40,000; Full time

Job summary

Tawteen is seeking a Manager IT Security to lead the Network Security and Endpoint Security teams within IT Security. You will secure the bank's systems from internal and external threats, plan for new technologies, and oversee audit-related activities and reporting.

You will manage 24x7 security operations, ensure system health, and coordinate with auditors and external parties. Strong English communication and banking IT security experience are essential.

Qualifications

• Bachelor in Computer Science, Information Systems or equivalent IT discipline; 11–12 years IT experience, at least 7 in IT Security Operations in a bank.
• Master's in Cyber Security is a plus.
• Certifications in Cyber security/IT Security/Risk (CISSP, CISM, CISA, GIAC, CEH, CRISC, etc.), at least two are required.
• Must know ISO 27001, ISO 27005, PCI-DSS, COBIT standards.

Responsibilities

• Supervise installation, administration and monitoring of Network Security and Endpoint Security systems.
• Coordinate with auditors and Central Bank of Oman during audits.
• Ensure 24x7 availability and performance of security systems.
• Oversee DR/BCP tests and change management procedures.
• Lead and mentor the Network Security & Endpoint Security teams.

Skills

IT Security Operations

Information Security

Network Security

Endpoint Security

Auditing

Cybersecurity Certifications

Education

Bachelor's in CS/IS or equivalent

Master's in Cyber Security (a plus)

Tools

Firewalls/VPN

IDS/IPS

DDoS Mitigation

Proxy/Content Filtering

Vulnerability Management

Job description

Job Title

Manager IT Security

Department

Information Technology

Main Role

Overall Accountability He is responsible for the following Managing and leading Network Security amp Endpoint Security teams within IT Security and its operations Ensure to secure the bank s systems and network from internal and external threats Plan to implement new technologies Handle respond and deliver audit related activities and action items Oversee the overall administration operations management device monitoring and technical support of the Network Security amp Endpoint Security Systems of the bank The Security Systems referenced here comprise but not limited to the following FirewallsIntrusion Prevention SystemsWeb Application FirewallsInternet Proxy Web FilteringDDoS Mitigation SystemVulnerability ManagementPatch DeploymentAntivirusUniversal Threat ManagementApplication Control

Principal Accountabilities

Supervise the installation administration and monitoring of Network Security amp Endpoint Security systems and other new technologies that have been implemented and the ones that will be implemented in the future Ensure system health checks are performed for Network Security amp Endpoint Security devices on periodic basis Review and update management and procedure documents to ensure that all changes in the processes and systems are adequately documented and up to date Manage AMC renewals for Network Security amp Endpoint Security systems devices and infrastructure Supervise the backup patch update and upgrade the Network Security amp Endpoint Security systems while adhering to the Change and Release Management procedures implemented in the bank Coordinate with the auditors internal external and Central Bank of Oman and assisting them in performing their duties while auditing the security systems Monitor security systems capacity utilization and plan for enhancements proactively Implement MIS reporting for all security components and review them periodically Ensure availability of Network Security amp Endpoint Security systems on 24 x 7 basis Supervise and ensure that all DR failover and failback tests are carried out successfully Coordinate with internal teams and external vendors to resolve issues and or to implement system changes Ensure regular updates on progress are conveyed to IT Management Ensure high quality deliverables and work products are provided and meet commitments for the schedule on satisfying the bank s user needs Must build a strong sense of commitment among all his team members to meet the user satisfaction levels Ensure that appropriate corrective and preventive actions are undertaken and resolve problems as soon as they arise

Qualifications and Experience

• Must be a graduate in Computer Science, Information Systems or equivalent IT disciplines, with 11-12 years of Information Technology experience out of which atleast 7 years shall be within IT Security Operations in a commercial Bank
• Master s Degree in Cyber Security is a plus.
• Certifications in Cyber security/ IT Security / Risk - CISSP, CISM, CISA, GIAC, CEH, CRISC etc.,atleast two certifications is a must have.
• Must have good knowledge of Standards such as ISO 27001, ISO 27005, PCI-DSS, CoBIT etc.
• Product trainings/certifications based on security technologies mentioned earlier is preferred.
• Hands-on experience on installation, administration, trouble shooting and user support of security products such as firewall/VPN, IDS/IPS, DDoS, proxy/content filtering SW, endpoint & data security etc. is a must have.
• Hands-on experience in Vulnerability management is a must have.
• LAN/WAN networking technologies, communication topologies and TCP/IP and other Network protocols, etc.
• Intranet, Internet and other web technologies.
• Security event monitoring & reporting.
• Documentation MIS preparation and reporting.
• Good communication and presentation skills with good command of spoken and written English.
• Good interpersonal relations with pleasing personality.