Job Title: Manager IT Security

Department: Information Technology

Main Role (Overall Accountability)

He is responsible for the following:

Managing and leading Network Security & Endpoint Security teams within IT Security and its operations

Ensure to secure the bank s systems and network from internal and external threats.

Plan to implement new technologies.

Handle, respond, and deliver audit related activities and action items.

Oversee the overall administration, operations management, device monitoring, and technical support of the Network Security & Endpoint Security Systems of the bank.

The Security Systems referenced here comprise, but not limited to, the following:

• Firewalls
• Intrusion Prevention Systems
• Web Application Firewalls
• Internet Proxy/Web Filtering
• DDoS Mitigation System
• Vulnerability Management
• Patch Deployment
• Antivirus
• Universal Threat Management
• Application Control

Principal Accountabilities

Supervise the installation, administration and monitoring of Network Security & Endpoint Security systems, and other new technologies that have been implemented and the ones that will be implemented in the future.

Ensure system health checks are performed for Network Security & Endpoint Security devices on periodic basis.

Review and update management and procedure documents to ensure that all changes in the processes and systems are adequately documented and up to date.

Manage AMC renewals for Network Security & Endpoint Security systems, devices and infrastructure.

Supervise the backup, patch, update, and upgrade the Network Security & Endpoint Security systems, while adhering to the Change and Release Management procedures implemented in the bank.

Coordinate with the auditors (internal, external, and Central Bank of Oman) and assisting them in performing their duties while auditing the security systems.

Monitor security systems capacity utilization and plan for enhancements proactively.

Implement MIS reporting for all security components, and review them periodically.

Ensure availability of Network Security & Endpoint Security systems on 24 x 7 basis.

Supervise and ensure that all DR failover and failback tests are carried out successfully.

Coordinate with internal teams and external vendors to resolve issues and/or to implement system changes.

Ensure regular updates on progress are conveyed to IT Management.

Ensure high quality deliverables and work products are provided and meet commitments for the schedule on satisfying the bank s user needs.

Must build a strong sense of commitment among all his team members to meet the user satisfaction levels.

Ensure that appropriate corrective and preventive actions are undertaken and resolve problems as soon as they arise.

Desired Candidate Profile

Must be a graduate in Computer Science, Information Systems or equivalent IT disciplines, with 11-12 years of Information Technology experience out of which atleast 7 years shall be within IT Security Operations in a commercial Bank

Master s Degree in Cyber Security is a plus.

Certifications in Cyber security/ IT Security / Risk - CISSP, CISM, CISA, GIAC, CEH, CRISC etc., atleast two certifications is a must have.

Must have good knowledge of Standards such as ISO 27001, ISO 27005, PCI-DSS, CoBIT etc.

Product trainings/certifications based on security technologies mentioned earlier is preferred.

Hands-on experience on installation, administration, trouble shooting and user support of security products such as firewall/VPN, IDS/IPS, DDoS, proxy/content filtering SW, endpoint & data security etc. is a must have.

Hands-on experience in Vulnerability management is a must have.

LAN/WAN networking technologies, communication topologies and TCP/IP and other Network protocols, etc.

Intranet, Internet and other web technologies.

Security event monitoring & reporting.

Documentation MIS preparation and reporting.

Good communication and presentation skills with good command of spoken and written English.

Good interpersonal relations with pleasing personality.