Assistant Manager

Reporting to the Head of Risk Management, the staff will be responsible for all cyber security risk management activities of the Bank in line with the requirements of the CBB rulebook and market best practices. The role involves assessing potential cyber security risks that could impact the organization and designing and implementing risk mitigation frameworks and plans for the same. The role also entails monitoring the effectiveness and performance of the risk mitigation frameworks as well as working with all stakeholders to establish adequate cyber security governance arrangements.

Key Responsibilities:

• Develop and maintain the Bank's Cyber Security and Information Security Framework documents – including Strategy, Policies, Procedures and Guidelines
• Review of IT Policies and procedures
• Monitor, analyse and report information security incidents arising from network and security devices, operating systems, database and application system and report on security incidents on a periodical basis
• Monitor the user access privileges in the Bank core systems
• Monitor the audit logs, using Bank SIEM system
• Monitor the appropriateness of the changes implemented in the core systems.
• Assist in identifying vulnerabilities and the appropriate controls to eliminate or minimize their potential effects.
• Evaluate the implemented Information security controlsand configurations according to the best practices and information security standards including IS027001 and NIST
• Coordinate the implementation of Information security controls.
• Investigate any actual or potential information Security violations and follow up investigations with written reports.
• Assure compliance to organization Information Security policies and procedures as well as CBB rules/regulations
• Update security initiatives or aspects within the Business Continuity Plan
• Provide periodic reporting on Information Security issues to the Board and Management
• Performs information security risk analysis and periodic information system activity reviews for information/Cyber security processes
• Monitors the physical and environmental controls implemented in the restricted areas
• Education and Awareness of all staff (annually).
• Manage the overall Cyber Security and Information security framework and posture of the organization
• Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information Security meets agreed standards within Alubaf.
• Keeping up to date with developments in IT security standards and threats.
• Monitoring network usage to ensure compliance with information security policies.
• Collaborating with management and the IT department to improve information security.
• Documenting any security breaches and assessing their damage
• Prepare reports and action plans in the event that a security breech does occur
• Ensure that the Bank has identified clear internal ownership and classification for all information assets and data
• Review and ensure that the inventory of information assets and data is updated regularly
• Analyse existing security systems and make recommendations for changes or improvements.
• Assess the security posture of external applications/solutions to ensure alignment with Alubaf's security standards and policies.
• Ensure independence and segregation of duties of the Information & cyber security function from the IT function.

Qualifications, Experience, Skills And Competencies:

• Degree in computer science or a technology-related field.
• Professional information security certification (such as CISSP, CISM, CEH etc.)
• Minimum 5 years of experience in Cybersecurity and Information Security Management field
• Experience in an information security role.
• Solid knowledge of various information security frameworks (such as ISO, NIST etc.).
• Ability to educate a non-technical audience about various security measures
• The role requires frequent interaction with various departments as part of Cyber Security evaluation and monitoring as well as building a CS awareness culture within the Bank.

Share your CV to

Seniority level

• Seniority levelMid-Senior level

Employment type

• Employment typeFull-time

Job function

• Job functionInformation Technology
• IndustriesBanking

Referrals increase your chances of interviewing at ALUBAF Arab International Bank B.S.C. by 2x

Get notified about new Information Security Manager jobs in Manama, Capital Governorate, Bahrain.

Al Khobar, Eastern, Saudi Arabia 3 hours ago

Manama, Capital Governorate, Bahrain 5 months ago

Technical Manager - Automotive and Industrial

Manama, Capital Governorate, Bahrain 10 months ago

Application Security - Identity and Access Management

Manama, Capital Governorate, Bahrain 1 month ago

Manama, Capital Governorate, Bahrain 5 months ago

Manama, Capital Governorate, Bahrain 4 months ago

We're unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr

---