Job Title : IT Security Specialist ( 6-7 Years Exp. )
A. Roles and responsibilities :
- Recommend information technology policies, standards and guidelines by evaluating the organizational outcomes, identifying problems, evaluating trends, and anticipating requirements.
- Work with the technical teams both within and outside of Company to embed, deploy or guide all security requirements.
- When applicable, conduct the information security risk assessment program. Review compliance with the information security policy and associated procedures and practices.
- Research and educate the IS organization around specific standards and regulations that might apply to different domains while monitoring their implementation throughout the security ecosystem and provide recommendations to the relevant stakeholders.
- Keep up to date with emerging security threats and alerts, emerging products, services, protocols, and standards in support of security enhancement and development efforts.
- Provide technical guidance to IS teams by means of coaching and mentorship to achieve project goals to the required level of quality. Promote team engagement, empowerment and motivation.
- Onboard new hires, train and share knowledge, take an active role in technical mentoring and elevating team knowledge.
- Enforce quality processes (i.e. performing technical root cause analysis, outlining corrective action forgiven problems) and ensure that all the project agreed deliverables are completed to the required level of quality.
B. Skills required:
- 6-7 years of experience in the information security management ecosystem
- Knowledge of security architectural considerations from an end-to-end security perspective within the domains of GRC, Architecture, application or ITsec
- In-depth knowledge of information security concepts and methodologies
- In-depth knowledge of compliances (PCI DSS, Sox, DPA, etc.) and IS standards (ISO 27001, BS25999, ISO 20000, OWASP, etc.)
- Team leadership experience - an advantage
Credentials
1.Bachelor's degree in engineering or equivalent
2.CISA/CISM preferable
3.CISSP/CEH preferable
4.ISO27001 certified