IT Security Manager

Gulf International Bank; Eastern Province; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading bank is seeking an IT Security Manager to oversee the implementation and management of security controls across its IT infrastructure. The role involves working closely with the Information Security team to ensure compliance with regulatory frameworks and maintain secure configurations. Candidates should have extensive experience in IT security operations, strong technical skills, and relevant professional certifications.

Qualifications

• 7+ years of experience in IT security operations.
• Hands-on experience with firewalls, IDS/IPS, endpoint security.
• Certifications like CISSP, CISM, CEH preferred.

Responsibilities

• Implement and manage security controls for IT infrastructure.
• Conduct vulnerability scans and manage patch processes.
• Collaborate with Security Operations Centre for incident response.

Skills

Technical Expertise

Problem-Solving

Collaboration

Adaptability

Education

Bachelor's degree in computer science or information systems

Job description

Job Description Job Purpose : The IT Security Manager is responsible for the implementation and operational management of security controls, ensuring the bank's IT infrastructure, systems, and applications are securely configured and maintained. This role focuses on technical security implementations, endpoint protection, vulnerability management, secure configurations, and security operations support, working closely with the Information Security team to ensure adherence to policies, procedures Job Description Job Purpose : The IT Security Manager is responsible for the implementation and operational management of security controls, ensuring the bank's IT infrastructure, systems, and applications are securely configured and maintained. This role focuses on technical security implementations, endpoint protection, vulnerability management, secure configurations, and security operations support, working closely with the Information Security team to ensure adherence to policies, procedures, regulatory frameworks and the overall bank's security strategy. Key Accountabilities 1. Security Implementation & Operations Deploy, configure, and maintain security solutions (firewalls, endpoint protection, email security, data encryption, etc.). Ensure secure configurations of IT systems, including servers, databases, networks, and endpoints. Work with IT teams to embed security best practices into infrastructure and application deployments. 2. Vulnerability & Patch Management Ensure regular vulnerability scans on IT systems and coordinate with IT teams to remediate findings. Manage the patch management process, ensuring timely updates to eliminate security risks. Ensure compliance with secure baseline configurations (e.g., CIS benchmarks, hardening guidelines). 3. Identity & Access Management (IAM) Support the integration of IAM solutions with existing IT infrastructure and applications. Support the periodic access reviews in coordination with the Information Security team. 4. Security Operations Support Collaborate with the Security Operations Centre (SOC), ensuring IT teams provide necessary logs and telemetry for threat detection. Support the incident response process by providing technical assistance during security incidents. Implement security monitoring tools (e.g., endpoint detection and response - EDR) and ensure log collection and integrity. 5. Compliance & Audit Support Implement security controls required by bank's regulators frameworks (SAMA, NCA, CBB, CBUAE, CBO and other regulatory bodies). Assist in internal and external IT security audits, addressing findings related to infrastructure security. Maintain IT security documentation and technical security standards. 6. Cloud & Application Security Ensure secure cloud configurations for IaaS, PaaS, and SaaS environments (AWS, Azure, OCI, etc.). Work with developers to integrate security into CI/CD pipelines (DevSecOps) and cloud environments. Support the implementation of Web Application Firewalls (WAFs) and API security solutions. Skills Qualifications, Experience and Skills Qualifications: A bachelor's degree in computer science, information systems (or a related field), or equivalent experience is required. Professional Certifications: Certifications (Preferred): CISSP, CISM, CEH, Microsoft/AWS Security Certifications, or equivalent. Experience: 7+ years of experience in IT security operations, system hardening, and security implementations. Hands-on experience with firewalls, IDS/IPS, endpoint security, SIEM integration, and IAM solutions. Strong knowledge of Windows/Linux security, network security, cloud security, and vulnerability management. Experience in incident response and forensic analysis is a plus. Skills: Technical Expertise - Deep understanding of IT security technologies and infrastructure security. Problem-Solving & Troubleshooting - Ability to quickly identify and mitigate security risks. Collaboration & Stakeholder Management - Works effectively with IT teams, SOC, and Information Security. Adaptability & Continuous Learning - Keeps up with evolving security threats and best practices. Apply Now

Disclaimer: Naukrigulf.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at [e-mail]

People Looking for IT Manager Jobs also searched