Senior Specialist - Cyber Information Security Assurance

Job Description

Responsibilities

• Contribute to the development and implementation of enterprise security, architecture, InfoSec and Groupwide information security management programs, initiatives and solutions based on the recognized international standards and frameworks (ISO 20000, NESA, CERT-RMM, ISO 22301, ISO 27000, PCI DSS, COBIT, etc.).
• Ensure alignment with current and future security, Abu Dhabi Ports Group digital infrastructure and applications portfolio.
• Identify InfoSec risks and maintain its registers, plans and reports.
• Contribute to the design and implementation of the information security vulnerability reduction programs, standards, framework, guidelines, and procedures.
• Assess cluster’s critical applications, processes and infrastructure environment to ensure their optimal protection and integrity.
• Conduct information security assessments, testing and assurance activities to identify potential security exposures and recommend improvements.
• programs within Abu Dhabi Ports Group aiming to improve the company workforce information security culture.
• Coordinate Digital Cluster internal and external audit and compliance activities and initiatives and maintain relationship with local law enforcement and other related government agencies.
• Engage in the preparation of projects and programs’ RFPs, bid proposals, contracts, and scopes of work for all information security and governance requirements.
• Handle the investigation of security breaches and lead root cause analysis to provide the necessary recommendations to prevent the re-occurrence of such events.
• Lead the Digital InfoSec risk management related activities and coordinate them with staff from the Digital Cluster organization and business unit teams.
• Develop and maintain the InfoSec risk management registers, plans and reports.
• Support in the integration of the InfoSec risk management program with the enterprise risk management practice.

People Management Responsibilities

• N/A

Strategic Responsibilities

• Contribute to the development of Abu Dhabi Ports Group information security vision, mission and principals.
• Actively contribute to the development of the Group’s enterprise information security strategic goals, initiatives, objectives and metrics.
• Enable the required information security governance structures and mechanisms.
• Work with other stakeholders to prioritize security initiatives and controls based on an effective risk management program.
• Make recommendations to business leaders/management to ensure alignment with current and future security standards and propose enhancements that will ensure the security and safeguard of Abu Dhabi Ports Group digital infrastructure and applications portfolio.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology or related field. Master's degree is a plus.
• A minimum of 6 - 8 years of experience in a similar role
• Should have experience in Ports, Technology, or management consulting/ Audit Firms.
• Must have knowledge of industry leading Digital Governance and Management Frameworks and practices.
• Track record in governance practices, business, and technology issues related to management of enterprise information assets and approaches related to data protection.
• Should possess knowledge of digital and data-related governance regulatory requirements and emerging trends and issues.
• Able to demonstrate consulting skills, with change management concepts and strategies, including communication, culture change, and performance measurement system design.
• Should have a knowledge of risk management, Business Continuity, technology architecture and technology solutions.

A Global Player

About The Team