Security Guard Jobs in Oman

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span><br>POSITION SUMMARY<br>Patrol all areas of the property; assist guests with room access. Monitor Closed Circuit Televisions, perimeter alarm system, duress alarms, and fire life safety system. Lock property entrances when required. Conduct daily physical hazard inspections. Respond to accidents, contact EMS or administer first aid/CPR as required. Assist guests/employees during emergency situations. Notify appropriate individuals in the event of accidents, attacks, or other incidents. Defuse guest/employee disturbances. Call for outside assistance if necessary. Complete incident reports to document all Security/Loss Prevention related incidents. Handle all interruptions and complaints. Resolve safety hazard situations. Escort any unwelcome persons from the property without interrupting the orderly flow of property operation. Report to scenes of vehicle accidents/thefts. Call for assistance using proper code responses. Complete a Loss Prevention shift summary/daily activity report. Maintain confidentiality of all Security/Loss Prevention and property reports/documents; release information only to authorized individuals. Conduct investigations and gather evidence. Conduct interviews with relevant parties.<br>Follow all company policies and procedures; report accidents, injuries, and unsafe work conditions to manager; complete safety training and certifications; ensure uniform and personal appearance are clean and professional; maintain confidentiality of proprietary information; protect company assets. Welcome and acknowledge all guests according to company standards; anticipate and address guests’ service needs; assist individuals with disabilities; thank guests with genuine appreciation. Speak with others using clear and professional language; prepare and review written documents accurately and completely. Develop and maintain positive working relationships with others; support team to reach common goals. Comply with quality assurance expectations and standards. Stand, sit, or walk for an extended period of time. In addition, some states may have additional licensing/registration requirements to be considered for this position. Read and visually verify information in a variety of formats (e.g., small print). Visually inspect tools, equipment, or machines (e.g., to identify defects). Enter and locate work-related information using computers and/or point of sale systems. Move at a speed required to respond to work situations (e.g., run, walk, jog). Stand, sit, or walk for an extended period of time or for an entire work shift. Move, lift, carry, push, pull, and place objects weighing less than or equal to 50 pounds without assistance and objects weighing in excess of 75 pounds with assistance. Grasp, turn, and manipulate objects of varying size and weight, requiring fine motor skills and hand-eye coordination. Move through narrow, confined, or elevated spaces. Move over sloping, uneven, or slippery surfaces as well as up and down stairs and/or service ramps. Reach overhead and below the knees, including bending, twisting, pulling, and stooping. Perform other reasonable job duties as requested by Supervisors.<br>PREFERRED QUALIFICATIONS<br>Education: High school diploma or G.E.D. equivalent.<br>Related Work Experience: No related work experience.<br>Supervisory Experience: No supervisory experience.<br>License or Certification: None<br>At Marriott International, we are dedicated to being an equal opportunity employer, welcoming all and providing access to opportunity. We actively foster an environment where the unique backgrounds of our associates are valued and celebrated. Our greatest strength lies in the rich blend of culture, talent, and experiences of our associates. We are committed to non-discrimination on any protected basis, including disability, veteran status, or other basis protected by applicable law.<br>At Courtyard, we’re passionate about better serving the needs of travelers everywhere. It’s what inspired us to create the first hotel designed specifically for business travelers, and it’s why the Courtyard experience today empowers our guests, no matter the purpose of their trip. We’re looking for achievers who are passionate about providing a guest experience that goes above and beyond, enjoy being part of a small yet ambitious team, and love learning how to always improve – all while having fun. <br>In joining Courtyard, you join a portfolio of brands with Marriott International. Be where you can do your best work,​ begin&nbsp;your purpose,&nbsp;belong&nbsp;to an amazing global​&nbsp;team, and&nbsp;become&nbsp;the best version of you.</span> </div>

<p>This job is contract under Nama Dhofar Services by ISAG Consulting Engineers. -Duration of contract: 2 years. Main Job Description: Responsible for protecting wastewater SCADA and OT infrastructure against cyber threats by implementing security controls, ensuring regulatory compliance, conducting risk assessments, and maintaining secure and resilient industrial control environments.</p><p><strong>Desired Candidate Profile</strong></p><ul><li>Bachelor s degree in Cybersecurity, Computer Engineering, or related field.</li><li>Minimum 10 years of experience in industrial cybersecurity (ICS/OT environment preferred).</li><li>Strong understanding of:<ul><li>Network segmentation and industrial firewalls</li><li>IDS/IPS systems</li><li>SIEM tools and log monitoring</li><li>Risk management in control systems</li></ul></li><li>Familiarity with industrial cybersecurity standards and frameworks.</li><li>Preferred Certifications: CISSP, CISM, or equivalent</li><li>GICSP (Global Industrial Cyber Security Professional)</li><li>CEH (optional)</li><li>Training or certification aligned with IEC 62443</li></ul>

<p>Job title Expert SAP Technical -Security Grade Stream People &amp; Technology Function Corporate IDS Location Oman -Muscat Budget control *OPEX and/or CAPEX and/or Revenue amount as relevant* Reporting to Manager SAP Technical Direct reports 0 Job purpose Leads the design, governance, and administration of SAP Technical Security to ensure the confidentiality, integrity, and availability of SAP systems and data. The role provides expert support for SAP Access Control through the SAP GRC suite, advises both business and SAP technical teams on best practice security models, and develops strong access and compliance controls across all SAP landscapes. It safeguards the organization from internal and external threats, ensures alignment with regulatory and corporate requirements, and promotes a culture of security awareness across the enterprise. The position will act in accordance with the Group s Mission, Vision, Values &amp; Strategies, as well as, policies, guidelines, and standards, supported by an IT Technology platform, HSE standards, Omani s government &amp; other legal justifications, and best international practices in consonance with national objectives. Main tasks and responsResponsibilities</p><ul><li>Develop and maintain SAP security policies, standards, and guidelines aligned with best practices, regulatory requirements, and corporate governance.</li><li>Design and implement role-based access control (RBAC), authorization concepts, and segregation of duties (SoD) frameworks to ensure least privilege access.</li><li>Architect and design SAP security solutions that meet OQ GRC requirements.</li><li>Implement and maintain security controls within S/4HANA, BW/BI, SAP SCM, SAP BTP and Business Objects.</li><li>Work directly with business users to establish security controls that support compliance while enabling business operations.</li><li>Provide expert-level operational support for SAP production security incidents, enhancements, role design, authorization errors, user administration, and SAP GRC system management.</li><li>Monitor and self-assign incoming SAP security and user administration tickets, ensuring timely and accurate resolution.</li><li>Manage user provisioning, role assignments, and access requests using SAP Identity Management (IDM), SAP Access Control (GRC), and relevant IAM tools.</li><li>Conduct periodic user access reviews, access certifications, and compliance assessments to ensure adherence to policies and regulations.</li><li>Collaborate with the Cybersecurity/SOC team to review SAP related SIEM alerts, security events, and audit logs, providing SAP expertise during investigations</li><li>Investigate security incidents, perform root cause analysis, and coordinate resolution with IT Security, SAP Basis, and business stakeholders.</li><li>Conduct regular security audits , assessments, and compliance reviews to validate the effectiveness of SAP controls and recommend remediation actions.</li><li>Prepare documentation and evidence for internal and external audits, ensuring compliance with requirements such as GDPR and SOX.</li><li>Perform vulnerability assessments, security scans, and penetration tests on SAP systems to identify and remediate weaknesses.</li><li>Coordinate the deployment of SAP security patches, notes, and corrections to maintain system integrity.</li><li>Deliver SAP security awareness training for users, administrators, and stakeholders to strengthen the organization s security culture.</li><li>Develop security procedures, guidelines, and training materials tailored to different user roles and business processes.</li></ul><p>Key interactions</p><ul><li>Internal: People &amp; Technology &amp; Corporate IDS</li><li>External: 3rd party Contractors, Vendors &amp; Suppliers</li></ul><p>Notable Working Conditions. Office environment, intensive computer screen use, sporadic visits to operation site.</p><p><strong>Desired Candidate Profile</strong></p><p>A minimum of a Bachelor s degree IT or related disciplines. <br>Certification in SAP security (e.g., SAP Certified Technology Associate - Security with SAP NetWeaver), is a plus. <br>SAP Basis Certified, SAP GRC Certified and relevant cloud/security certifications are a plus. <br>Language Excellent knowledge of written, read, and spoken English (required)</p><p>Background and experience</p><p>Competencies and skills</p><ul><li>A minimum of 8-10 years of experience in SAP security roles, with expertise in SAP security architecture, user management, access controls, and compliance.</li><li>Experience with security standards, frameworks, and regulations such as ISO 27001, NIST Cybersecurity Framework, GDPR, and SOX.</li><li>Experience in leading teams of SAP Security and SAP GRC Resources</li><li>Experience in implementing SAP Basis and Security Modules.</li><li>Experience in project managing SAP Security implementations across S/4HANA, BW/BI, and Fiori landscapes.</li></ul><p>Soft:</p><ul><li>Excellent critical thinking skills, with the ability to analyze complex security issues, assess risks, and propose effective solutions.</li><li>Effective communication, collaboration, and stakeholder management skills, with the ability to interact effectively with technical teams, business users, and audit teams.</li><li>Analytical skills.</li><li>Planning skills.</li><li>Forward thinking.</li><li>Strong presentation skills.</li><li>Business Results Orientation.</li><li>Prioritization skills.</li></ul><p>Technical:</p><ul><li>Computer Literacy including MS Office.</li><li>Advanced SAP software knowledge and a full understanding of security roles related to SAP user profiles is an advantage.</li><li>Strong knowledge of SAP security technologies and tools, including SAP IDM, SAP GRC, SAP SIEM, and SAP Security Notes.</li><li>Understanding of coding languages (SAP ABAB ABAP, SAP Fiori, Java, JavaScript).</li><li>Familiarity with integration middleware, ETL platforms, mobility solutions, and cloud-based services</li><li>Strong understanding of O&amp;G ERP business process.</li><li>Understanding of audit and business controls functions and its related SAP Security.</li><li>Project Management.</li></ul>

<p> <strong>Job Purpose:</strong> </p> <p>The Manager Cyber &amp; Information Security (InfoSec) Operations supervises the bank s cyber defense operations, ensuring timely detection, response, and resolution of security incidents. He/ She operates incident handling, digital forensics, and third-party cybersecurity coordination while maintaining compliance with regulatory and internal security frameworks. The role supports key operational security controls, drives continuous improvements in threat response, and collaborates with stakeholders to safeguard the bank s information assets across platforms and vendors.</p> <p> <strong>Key Accountabilities:</strong> </p> <p>Manages the full lifecycle of cybersecurity incident response including detection, triage, containment, eradication, recovery, and post-incident review.</p> <p>Conducts Root Case Analysis (RCA) [HH1] of compromised systems and preserves digital evidence for compliance and legal use.</p> <p>Updates and tests the incident response plan and playbooks to ensure readiness.</p> <p>Investigate security incidents such as unauthorized access, insider threats, and external attacks.</p> <p>Interfaces with MSSPs and third-party vendors for alert triage, escalation, and monitoring performance.</p> <p>Optimizes SIEM rules, detection logic, and response workflows with vendors and internal teams.</p> <p>Conducts regular meetings with vendors to review SLAs, resolve issues, and improve service levels.</p> <p>Evaluates emerging cybersecurity technologies and engages with vendors to enhance capabilities.</p> <p>Conducts risk assessments, vulnerability scans, and penetration testing to identify and mitigate threats.</p> <p>Implements and maintains the Bank s information security program in compliance with regulatory and business standards.</p> <p>Develops and enforces cybersecurity policies, standards, and procedures in alignment with frameworks (ISO 27001, CBO, MTCIT).</p> <p>Manages ISO 27001 certification efforts and maintains ISMS documentation and audit readiness.</p> <p>Maintains the cybersecurity risk register, audit findings, and remediation tracking.</p> <p>Performs user access reviews and privileged access reviews for critical systems in compliance with RBAC and regulatory requirements.</p> <p>Manages enforcement of PAM controls and maintains evidence of periodic access reviews.</p> <p>Approves firewall, system, and administrative access changes as the designated ISO authority.</p> <p>Coordinates with HR to manage onboarding and offboarding access controls for staff, vendors, and contractors.</p> <p>Provides security input for new IT and business projects, ensuring risk mitigation is embedded in solution design.</p> <p>Conduct security assessments, architectural reviews, and integration support for new systems.</p> <p>Communicates incident updates, risks, and resolutions to stakeholders across IT, Legal, Compliance, and Business Units.</p> <p>Develops and delivers cybersecurity awareness and training programs to staff.</p> <p>Fosters a culture of accountability, proactive defense, and information security ownership.</p> <p>Leads cyber drill simulations and incident response exercises to improve response capabilities.</p> <p>Ensures compliance with data protection regulations and internal privacy policies.</p> <p>Develops and maintains privacy notices, consent forms, and data handling procedures.</p> <p>Manages data subject access requests and leads investigations into privacy-related incidents.</p> <p>Acts as the main liaison with Data Protection Authorities during audits or investigations.</p> <p>Executes the information security roadmap aligned with enterprise risk strategy.</p> <p>Ensures ongoing adherence to cybersecurity best practices, regulatory mandates, and corporate security policies.</p> <p>Maintains high standards of professionalism, accuracy, and integrity in all operational duties.</p> <p>Collaborates with internal functions to sustain an enterprise-wide security and privacy posture.</p> <p>Ensures incident reports, root cause analysis documentation, and regulatory compliance submissions are completed following cybersecurity and data privacy incidents.</p> <p>Develops dashboards and executive summaries for senior management highlighting the requirement.</p> <p>Maintains and regularly updates a comprehensive risk register for third-party security and privacy vendors.</p> <p>Ensures compliance with data protection regulations and international best practices, including GDPR, CCPA, CDC, MTCIT, CBO, and PDPL.</p> <p>Administers privacy impact assessments (PIAs) and data protection impact assessments (DPIAs), ensuring they are conducted thoroughly and in a timely manner.</p> <p>Serves as the primary point of contact for data subjects and regulatory authorities on data privacy inquiries and breach communications, acting in the capacity of the Data Privacy Officer (DPO).</p> <p>Implements and monitors data governance policies that ensure secure, lawful, and transparent data processing across all departments.</p> <p>Maintains up-to-date records of processing activities (ROPA) and ensures data retention, deletion, and anonymization policies align with applicable legal and regulatory requirements.</p><p><strong>Desired Candidate Profile</strong></p><p> <strong>Qualifications and Experience:</strong> </p> <p>Bachelor Degree in Information Security, Cybersecurity, Information Systems or a related field.</p> <p>Professional certification in Information Security such as: GCIH, GCFA, GCFE, CISSP, CEH, CISM, ISO 27001) is preferred.</p> <p>Minimum of 4 years of experience with at least 2 years in a banking or a regulated environment.</p> <p>Familiarity with using cybersecurity tools such as SIEM, EDR and forensic platforms.</p> <p>Demonstrates familiarity with country-specific information security regulations and expertise.</p> <p>Strong knowledge of related ISO such as ISO 27001 and related global standards.</p> <p>Ability to conduct risk assessments, vulnerability assessments and penetration testing.</p> <p>Ability to develop IS standards, procedures and controls.</p>

<p>Job title Expert SAP Technical -Security Grade Stream People &amp; Technology Function Corporate IDS Location Oman -Muscat Budget control *OPEX and/or CAPEX and/or Revenue amount as relevant* Reporting to Manager SAP Technical Direct reports 0 Job purpose Leads the design, governance, and administration of SAP Technical Security to ensure the confidentiality, integrity, and availability of SAP systems and data. The role provides expert support for SAP Access Control through the SAP GRC suite, advises both business and SAP technical teams on best practice security models, and develops strong access and compliance controls across all SAP landscapes. It safeguards the organization from internal and external threats, ensures alignment with regulatory and corporate requirements, and promotes a culture of security awareness across the enterprise.</p><p>The position will act in accordance with the Group s Mission, Vision, Values &amp; Strategies, as well as, policies, guidelines, and standards, supported by an IT Technology platform, HSE standards, Omani s government &amp; other legal justifications, and best international practices in consonance with national objectives.</p><p>Main tasks and responsibilities</p><ul><li>Develop and maintain SAP security policies, standards, and guidelines aligned with best practices, regulatory requirements, and corporate governance.</li><li>Design and implement role-based access control (RBAC), authorization concepts, and segregation of duties (SoD) frameworks to ensure least privilege access.</li><li>Architect and design SAP security solutions that meet OQ GRC requirements.</li><li>Implement and maintain security controls within S/4HANA, BW/BI, SAP SCM, SAP BTP and Business Objects.</li><li>Work directly with business users to establish security controls that support compliance while enabling business operations.</li><li>Provide expert-level operational support for SAP production security incidents, enhancements, role design, authorization errors, user administration, and SAP GRC system management.</li><li>Monitor and self-assign incoming SAP security and user administration tickets, ensuring timely and accurate resolution.</li><li>Manage user provisioning, role assignments, and access requests using SAP Identity Management (IDM), SAP Access Control (GRC), and relevant IAM tools.</li><li>Conduct periodic user access reviews, access certifications, and compliance assessments to ensure adherence to policies and regulations.</li><li>Collaborate with the Cybersecurity/SOC team to review SAP related SIEM alerts, security events, and audit logs, providing SAP expertise during investigations</li><li>Investigate security incidents, perform root cause analysis, and coordinate resolution with IT Security, SAP Basis, and business stakeholders.</li><li>Conduct regular security audits , assessments, and compliance reviews to validate the effectiveness of SAP controls and recommend remediation actions.</li><li>Prepare documentation and evidence for internal and external audits, ensuring compliance with requirements such as GDPR and SOX.</li><li>Perform vulnerability assessments, security scans, and penetration tests on SAP systems to identify and remediate weaknesses.</li><li>Coordinate the deployment of SAP security patches, notes, and corrections to maintain system integrity.</li><li>Deliver SAP security awareness training for users, administrators, and stakeholders to strengthen the organization s security culture.</li><li>Develop security procedures, guidelines, and training materials tailored to different user roles and business processes.</li></ul><p>Key interactions</p><ul><li>Internal: People &amp; Technology &amp; Corporate IDS</li><li>External: 3rd party Contractors, Vendors &amp; Suppliers</li></ul><p>Notable Working Conditions. Office environment, intensive computer screen use, sporadic visits to operation site.</p><p><strong>Desired Candidate Profile</strong></p><ul><li>A minimum of a Bachelor's degree IT or related disciplines.</li><li>Certification in SAP security (e.g., SAP Certified Technology Associate - Security with SAP NetWeaver), is a plus.</li><li>SAP Basis Certified, SAP GRC Certified and relevant cloud/security certifications are a plus.</li><li>Excellent knowledge of written, read, and spoken English (required)</li><li>A minimum of 8-10 years of experience in SAP security roles, with expertise in SAP security architecture, user management, access controls, and compliance.</li><li>Experience with security standards, frameworks, and regulations such as ISO 27001, NIST Cybersecurity Framework, GDPR, and SOX.</li><li>Experience in leading teams of SAP Security and SAP GRC Resources</li><li>Experience in implementing SAP Basis and Security Modules.</li><li>Experience in project managing SAP Security implementations across S/4HANA, BW/BI, and Fiori landscapes.</li><li>Excellent critical thinking skills, with the ability to analyze complex security issues, assess risks, and propose effective solutions.</li><li>Effective communication, collaboration, and stakeholder management skills, with the ability to interact effectively with technical teams, business users, and audit teams.</li><li>Analytical skills.</li><li>Planning skills.</li><li>Forward thinking.</li><li>Strong presentation skills.</li><li>Business Results Orientation.</li><li>Prioritization skills.</li><li>Computer Literacy including MS Office.</li><li>Advanced SAP software knowledge and a full understanding of security roles related to SAP user profiles is an advantage.</li><li>Strong knowledge of SAP security technologies and tools, including SAP IDM, SAP GRC, SAP SIEM, and SAP Security Notes.</li><li>Understanding of coding languages (SAP ABAB ABAP, SAP Fiori, Java, JavaScript).</li><li>Familiarity with integration middleware, ETL platforms, mobility solutions, and cloud-based services</li><li>Strong understanding of O&amp;G ERP business process.</li><li>Understanding of audit and business controls functions and its related SAP Security.</li><li>Project Management.</li></ul>

<p>We are looking for a skilled Network Engineer to join our team in Muscat. Key Skills: Fortinet (FortiGate Firewall) administration and troubleshooting Email Security solutions (Microsoft Defender, FortiMail, Proofpoint, Mimecast, or similar) Routing &amp; Switching (Cisco/Fortinet) VPN, NAT, IPS/IDS, SD-WAN Network monitoring and performance optimization Troubleshooting LAN/WAN and network security incidents</p><p><strong>Desired Candidate Profile</strong></p><p>The ideal candidate should have hands-on experience in enterprise networking, network security, and email security solutions.</p><p>Requirements:</p><ul><li>410 years of relevant experience</li><li>Strong knowledge of network security best practices</li><li>Relevant certifications (NSE, CCNA/CCNP, or equivalent) are an advantage</li><li>Immediate joiners will be preferred</li></ul>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Please submit your CV in English and indicate your level of English proficiency.<br> Mindrift connects specialists with project-based AI opportunities for leading tech companies, focused on testing, evaluating, and improving AI systems.<br> Participation is project-based, not permanent employment.<br> What this opportunity involves We're building a dataset to evaluate AI coding agents - how well a model handles real-world developer tasks.<br> You'll create challenging tasks and evaluation criteria within realistic simulated environments: Build realistic developer environments - a virtual company with codebase, infrastructure, and context (tickets, docs, conversations) that forms a believable development history Design tasks from intermediate states of these environments - craft the prompt, define what "solved" means, and ensure the task is solvable by an AI agent Write tests that verify agent solutions - accept all valid approaches and reject incorrect ones, neither too strict nor too lenient Iterate on tasks and tests based on QA feedback - review agent solutions, analyze failures, and refine until the evaluation is fair and robust What this is NOT Not data labeling Not prompt engineering Not writing code from scratch - the agent writes most of the code; you guide and evaluate What we look for 5+ years in software development Core stack: Python (FastAPI), JavaScript/TypeScript (React), Docker, Postgres, Kafka, Redis Experience writing tests (functional, integration) English proficiency - B2+ Why this is hard Frontier models are already good at coding.<br> Creating a task that genuinely challenges the best models is non-trivial.<br> You need to deeply understand where models fail and what scenarios reveal the difference between a good and a bad solution.<br> Tasks have many valid solutions - writing tests that accept all correct solutions and reject incorrect ones is harder than it sounds.<br> How it works Apply → Pass qualification(s) → Join a project → Complete tasks → Get paid Compensation Up to $50/hr equivalent , depending on level and pace.<br> Tasks are estimated at ~20 hours each; you set your own schedule.<br></span> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong><span>Some careers grow faster than others.&nbsp;&nbsp;&nbsp;&nbsp;<br>&nbsp;&nbsp;&nbsp;&nbsp;<br></span></strong></p><br><br><p><strong><span>If you’re looking for further opportunities to develop your career, take the next step in fulfilling your potential right here at HSBC.<br></span></strong></p><br><br><p><span>Cybersecurity enables businesses and functions to manage information security risks by ensuring that risks and controls are assessed and implemented appropriately, objectively and independently, supported by professional and specialized subject-matter expertise.<br></span></p><br><br><p><span>The Cybersecurity Manager will lead the Cybersecurity Function for the Oman branch as part of the global and regional Cybersecurity organization. The role will be responsible for defining and implementing an industry-leading cybersecurity service that evolves in response to the constantly changing information security threat landscape.<br></span></p><br><br><p><span>The role holder will build trusted relationships with country and regional senior stakeholders, support regional cybersecurity initiatives and act as the Information Security Officer for Oman. Responsibilities will also include addressing local regulatory requirements, representing the organization at financial-sector cybersecurity forums, and acting as the key contact for internal and external auditors on cybersecurity matters.<br></span></p><br><br><p><strong><span>Duties &amp; Responsibilities:<br></span></strong></p><br><br><ul><li><span>Collaborate with Global, Regional and Country Technology representatives, as well as peer managers, to deliver team objectives within applicable country policies, budgetary limits and regulatory requirements.</span></li><li><span>Lead and support colleagues in developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity management programme.</span></li><li><span>Support Group and Regional business technology planning by providing up-to-date insight into current capabilities and a forward-looking view of technology and systems.</span></li><li><span>Contribute to the Country and Regional Cybersecurity strategy, protecting the bank’s technology environment while upholding and enhancing HSBC’s values, reputation and stakeholder value.</span></li><li><span>Support the Regional Chief Information Security Officer in delivering global cybersecurity programmes across the region and country.</span></li><li><span>Coordinate and deliver cybersecurity training and awareness sessions to strengthen employees’ understanding of information security. Set performance objectives for direct reports and support their professional development.</span></li><li><span>Work with business stakeholders across the organization to raise awareness of risk management matters, communicate the country’s cybersecurity risk profile and promote appropriate risk mitigation and control actions.</span></li><li><span>Balance organizational security requirements with business objectives to manage security risks while enabling the achievement of strategic goals.</span></li><li><span>Monitor the evolving threat landscape and brief the Country Board and senior management on the bank’s security posture, emerging threats and significant events affecting the financial-services industry.</span></li><li><span>Provide country management with regular updates on cybersecurity improvement initiatives, including their benefits, progress, key challenges and any decisions or support required.</span></li><li><span>Provide guidance to ensure that country-specific cybersecurity regulatory requirements are addressed promptly through the implementation of appropriate controls and the development or enhancement of policies and standards.</span></li><li><span>Support cybersecurity governance activities by maintaining alignment with Global and Regional messaging and ensuring that formal oversight is exercised through the appropriate governance forums.</span></li><li><span>Lead, coordinate and manage cybersecurity committee meetings, including agendas, materials, actions and follow-up.</span></li><li><span>Strengthen and maintain the bank’s relationships with the Central Bank and other relevant regulatory authorities.<br></span></li></ul><p><span>&nbsp;<strong>Experience &amp; Qualifications:<br></strong></span></p><br><br><ul><li><span>A full-time graduation degree of at least three years is essential for obtaining a UAE visa and work permit. For degrees obtained outside the UAE, valid attestations and equivalency are also mandatory.</span></li><li><span>A minimum of a bachelor’s degree, with at least 10 years’ experience in IT security governance and operational processes, preferably within the financial services industry or a global corporate services environment.</span></li><li><span>Experience in Risk management, Audit</span></li><li><span>A positive and professional approach, with the ability to work effectively as part of a team.</span></li><li><span>Flexible, adaptable and open to change.</span></li><li><span>Confident, accountable and willing to take ownership of responsibilities and ongoing professional development.</span></li><li><span>Strong written and verbal communication skills, with the ability to adapt communication style to different audiences. Fluency in written and spoken English is required.</span></li><li><span>Ability to explain complex technical and cybersecurity concepts clearly to non-technical stakeholders.</span></li><li><span>A proven commitment to delivering high-quality customer service.</span></li><li><span>Ability to build effective working relationships quickly with a broad range of stakeholders.</span></li><li><span>Self-motivated, with the ability to learn quickly and apply new knowledge effectively.<br></span></li></ul><p><span>For further details and application information please visit our careers site, searching for the reference number </span><strong><span>60924</span></strong><span>.<br></span><span>We support our staff to adopt flexible and alternative ways of working where possible, including working from home and different hours subject to approvals.<br></span></p><br><br><p><span>HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working, and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.<br></span></p><br><br><p><span>Issued by The Hong Kong and Shanghai Banking Corporation Limited</span></p><br><br><br><br><br> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Nationality"> <b>Nationality</b> </div> <div class="col is-9 p5" data-automation-id="data_Nationality"> Oman </div> </div>

<p> <strong>JOB PURPOSE</strong> </p> <p>To supervise security activities including patrols, security checks and inspections to ensure that ASYAD Drydock Company ADC personnel, worksites, equipment, materials, warehouses and information are always protected and in line with security standards. Ensure compliance with local government and ISPS requirements</p> <p> <strong>KEY ACCOUNTABILITIES</strong> </p> <p> <strong>Description</strong> </p> <p> <strong>Day-to-Day Activities</strong> </p> <p>Supervise day-to-day security activities, providing guidance to Officers and resolving related issues to ensure that escalated matters are handled timely and effectively, thus maintaining levels of security across ADC</p> <p> <strong>Security Program</strong> </p> <p>Develop administer and supervise the implementation of all segments of ADC s security program including physical, technical, personnel, and electronic security control as well as inspections and patrol checks to ensure that desired security levels are maintained and that there are no breaches</p> <p> <strong>Coordination</strong> </p> <p>Work closely with internal departments to ensure that security activities, programs and processes are coordinated to optimize the protection of personnel, worksites, equipment, materials, warehouses and information</p> <p>Maintain relations with law enforcement officers to ensure effective coordination in cases of emergencies or incidents</p> <p> <strong>Preventive Maintenance</strong> </p> <p>Carry out and supervise preventive maintenance activities such as checking the availability and operation of security equipment and systems including intrusion devices, alarms and cameras to ensure reliability and functionality</p> <p> <strong>Equipment Repairs/ Replacements</strong> </p> <p>Determine the corrective actions required in case of equipment malfunctioning and make necessary coordination with internal departments and/or suppliers to ensure that the equipment is repaired/replaced timely and according to standards</p> <p> <strong>Incidents and Violations</strong> </p> <p>Handle escalated incidents or violations of security rules, coordinate with concerned parties, and lead investigations to ensure prompt handling and resolution and prevent recurrence</p> <p> <strong>Investigations</strong> </p> <p>Participate in investigating breaches of security, investigating all suspected internal and external criminal violations in line with rules and regulations, suspicious incidents and policy violations and initiate corrective actions to prevent recurrence</p> <p> <strong>Emergencies</strong> </p> <p>Ensure effective and timely response to emergency situations in line with procedures to ensure that the problem is stabilized and coordinate with other parties to safeguard users, personnel and facilities</p> <p> <strong>Documentation and Recordkeeping</strong> </p> <p>Maintain all relevant section records, reports and documentation to ensure timely and effective reporting of information as well as availability of accurate information for any future reference or actions</p> <p> <strong>Security Training and Awareness</strong> </p> <p>Provide appropriate security training and awareness in order to maintain and increase readiness and competency of personnel to respond to any emergency or security hazard</p> <p> <strong>Continuous Improvement</strong> </p> <p>Contribute to the identification of opportunities for the continuous improvement of systems, processes and practices taking into account leading practices, improvement of processes and productivity improvement</p> <p> <strong>Policies, Systems, Processes &amp; Procedures</strong> </p> <p>Implement approved security policies, processes, and procedures, provide instructions to subordinates and monitor their adherence so that work is carried out in a controlled manner</p> <p>Develop and ensure implementation of physical security procedures and processes</p> <p> <strong>Regulatory and ISPS Compliance</strong> </p> <p>Implement and ensure arrangement activities/initiatives to comply with local government and ISPS requirements</p> <p> <strong>HSSE</strong> </p> <p>Adhere to and ensure compliance with all relevant health, safety, security and environment procedures, standards, controls and systems across ADC to guarantee employee safety and security, compliance with procedures, and a responsible environmental attitude</p> <p> <strong>Relevant Task</strong> </p> <p>Any other duties/responsibilities related to HSSE Department and/or Security assigned by Company</p><p><strong>Desired Candidate Profile</strong></p><p> <strong>QUALIFICATIONS, EXPERIENCE &amp; SKILLS</strong> </p> <p> <strong>Minimum Qualifications</strong> </p> <p>Degree or Diploma in any discipline (Security related degree will be an advantage to candidate)</p> <p> <strong>Minimum Experience</strong> </p> <p>3 years of relevant experience as a Sr. Security officer or including at least 1 year in a position involving supervisory responsibilities</p> <p> <strong>Job-Specific Knowledge &amp; Skills</strong> </p> <p>Understanding of relevant operational processes and procedures</p> <p>Knowledge of security devices and equipment such as scanners, radio communication, explosive detector, etc</p> <p>Knowledge of electronic security control systems</p> <p>Communication skills</p> <p>Supervisory skills</p>

<p> <strong>JOB PURPOSE:</strong> </p> <p>To supervise security activities including patrols, security checks and inspections to ensure that ASYAD Drydock Company ADC personnel, worksites, equipment, materials, warehouses and information are always protected and in line with security standards. Ensure compliance with local government and ISPS requirements.</p> <p> <strong>KEY ACCOUNTABILITIES:</strong> </p> <p> <strong>Description</strong> </p> <p> <strong>Day-to-Day Activities</strong> </p> <p>Supervise day-to-day security activities, providing guidance to Officers and resolving related issues to ensure that escalated matters are handled timely and effectively, thus maintaining levels of security across ADC.</p> <p> <strong>Security Program</strong> </p> <p>Develop administer and supervise the implementation of all segments of ADC s security program including physical, technical, personnel, and electronic security control as well as inspections and patrol checks to ensure that desired security levels are maintained and that there are no breaches.</p> <p> <strong>Coordination</strong> </p> <p>Work closely with internal departments to ensure that security activities, programs and processes are coordinated to optimize the protection of personnel, worksites, equipment, materials, warehouses and information.</p> <p>Maintain relations with law enforcement officers to ensure effective coordination in cases of emergencies or incidents.</p> <p> <strong>Preventive Maintenance</strong> </p> <p>Carry out and supervise preventive maintenance activities such as checking the availability and operation of security equipment and systems including intrusion devices, alarms and cameras to ensure reliability and functionality.</p> <p> <strong>Equipment Repairs/ Replacements</strong> </p> <p>Determine the corrective actions required in case of equipment malfunctioning and make necessary coordination with internal departments and/or suppliers to ensure that the equipment is repaired/replaced timely and according to standards.</p> <p> <strong>Incidents and Violations</strong> </p> <p>Handle escalated incidents or violations of security rules, coordinate with concerned parties, and lead investigations to ensure prompt handling and resolution and prevent recurrence.</p> <p> <strong>Investigations</strong> </p> <p>Participate in investigating breaches of security, investigating all suspected internal and external criminal violations in line with rules and regulations, suspicious incidents and policy violations and initiate corrective actions to prevent recurrence.</p> <p> <strong>Emergencies</strong> </p> <p>Ensure effective and timely response to emergency situations in line with procedures to ensure that the problem is stabilized and coordinate with other parties to safeguard users, personnel and facilities.</p> <p> <strong>Documentation and Recordkeeping</strong> </p> <p>Maintain all relevant section records, reports and documentation to ensure timely and effective reporting of information as well as availability of accurate information for any future reference or actions.</p> <p> <strong>Security Training and Awareness</strong> </p> <p>Provide appropriate security training and awareness in order to maintain and increase readiness and competency of personnel to respond to any emergency or security hazard.</p> <p> <strong>Continuous Improvement</strong> </p> <p>Contribute to the identification of opportunities for the continuous improvement of systems, processes and practices taking into account leading practices, improvement of processes and productivity improvement.</p> <p> <strong>Policies, Systems, Processes &amp; Procedures</strong> </p> <p>Implement approved security policies, processes, and procedures, provide instructions to subordinates and monitor their adherence so that work is carried out in a controlled manner.</p> <p>Develop and ensure implementation of physical security procedures and processes.</p> <p> <strong>Regulatory and ISPS Compliance</strong> </p> <p>Implement and ensure arrangement activities/initiatives to comply with local government and ISPS requirements.</p> <p> <strong>HSSE</strong> </p> <p>Adhere to and ensure compliance with all relevant health, safety, security and environment procedures, standards, controls and systems across ADC to guarantee employee safety and security, compliance with procedures, and a responsible environmental attitude.</p> <p> <strong>Relevant Task</strong> </p> <p>Any other duties/responsibilities related to HSSE Department and/or Security assigned by Company.</p><p><strong>Desired Candidate Profile</strong></p><p> <strong>QUALIFICATIONS, EXPERIENCE &amp; SKILLS:</strong> </p> <p> <strong>Minimum Qualifications:</strong> </p> <p>Degree or Diploma in any discipline (Security related degree will be an advantage to candidate)</p> <p> <strong>Minimum Experience:</strong> </p> <p>3 years of relevant experience as a Sr. Security officer or including at least 1 year in a position involving supervisory responsibilities</p> <p> <strong>Job-Specific Knowledge &amp; Skills:</strong> </p> <p>Understanding of relevant operational processes and procedures</p> <p>Knowledge of security devices and equipment such as scanners, radio communication, explosive detector, etc</p> <p>Knowledge of electronic security control systems</p> <p>Communication skills</p> <p>Supervisory skills</p>

<p><strong>MACHINE OPERATORS <br> <br> Location: Gypsum Board Plant </strong> <br> <br> <strong>Plant Operators</strong> are responsible for the safe, efficient, and continuous operation of the gypsum board manufacturing line during their assigned shift. Operators monitor automated machinery, execute raw material feeding, adjust process formulations, manage thermal kiln parameters, maintain strict quality control targets (minimum 97% good board output<br> and maximum 3% rejection), and coordinate via plant horn signals to minimize downtime.<br> <br> <strong>KEY RESPONSIBILITIES &amp; DUTIES</strong> <br> <br> ? <strong>Raw Material &amp; Mixing Operations: </strong>Supply stucco, raw additives, and chopped fiberglass<br> safely into the feeders and tanks. Monitor head control, glue application, and flow of edge mix<br> slurry while visually checking slurry for abnormal variations.<br> ?<strong> Paper Handling &amp; Splicing:</strong> Safe operation of clamp trucks, forklifts, and paper lifters.<br> Prepare rolls, execute clean paper roll changeovers, and implement perfect roll alignment<br> during machine splices to eliminate material breakages.<br> ? <strong>Wet Transfer &amp; Knife Control</strong>: Stand guard at the board knife area to maintain precise board<br> lengths, monitor facial appearance/recesses every 30 minutes, and flag defective boards<br> before kiln entry to limit waste to under 3%.<br> ? <strong>Dryer &amp; Kiln Optimization:</strong> Maintain full operation of the kiln. Hourly record, control, and<br> adjust dryer parameters (temperatures, pressures, and speeds) across product types to avoid<br> gaps or board warping.<br> ? <strong>Take-off &amp; Stacker Coordination:</strong> Manage the line segment from the dry transfer to the final<br> stacker area. Ensure precise edge tape application, extract quality control samples every 30<br> minutes, and isolate all cull or rejected boards.<br> ? <strong>Shift Leadership &amp; Coordination:</strong> Under supervisor direction, lead cross-training across<br> active line stations, log operational, electrical, and mechanical anomalies, enforce strict<br> plant-wide safety rules, and maintain flawless communication via horn signalling.</p><p><strong>Desired Candidate Profile</strong></p><p><strong>QUALIFICATIONS &amp; REQUIREMENTS</strong> <br> <br> ? <strong>Education</strong>: Diploma/Degree/High School Graduate/Certification in Industrial Automation,<br> Process Operations, Mechanical/Electrical Technology, or completion of a recognized<br> vocational education program in industrial operational training.<br> ? <strong>Apprenticeship</strong>: Completion of a recognized structural or industrial operational training<br> program is highly preferred.<br> ?<strong> Experience: </strong>1 to 5 years of proven working experience in the industrial manufacturing field,<br> or 1 out of the last 5 years handling heavy production machinery as an operator in a gypsum<br> board, cement, or continuous-process plant or any related industries.<br> ?<strong> Technical Compliance</strong>: Knowledgeable of applicable machinery codes, plant safety<br> standards, operational parameters (pressures, temperatures, speeds), and environmental<br> regulations.<br> <strong>? Core Skills:</strong> Competency in operating board-line Human Machine Interfaces (HMI), using<br> basic mechanical/electrical diagnostic tools, executing mill changeovers, monitoring<br> chemical slurry/bonds, and reading advanced operational checklists.</p>

<p> <strong>Position: Senior Security Consultant</strong> </p> <p>7-9+ years experience</p> <p>Full-time onsite</p> <p>Initial 1 year</p> <p>Location: Muscat</p> <br> <p> <strong>1. Job description (JD)</strong> </p> <p>The Senior Security Consultant will conduct penetration testing and security assessments for business projects and change requests deployed in pre-production and production environments. The consultant will assess applications, APIs, infrastructure, networks, containers and Kubernetes environments; identify vulnerabilities and security risks; recommend remediation; validate corrective actions; and support compliance with banking security standards and regulatory requirements.</p> <p> <strong>Key responsibilities</strong> </p> <ul> <li>Perform web, mobile, API, network, container and Kubernetes penetration testing.</li> <li>Conduct Istio service mesh security assessments.</li> <li>Review operating systems, databases, firewalls and network-device configurations.</li> <li>Assess security architecture, configurations, vulnerabilities and associated risks.</li> <li>Conduct threat modelling, security assessments and risk workshops.</li> <li>Coordinate internal and external penetration-testing vendors, including test planning, access coordination, findings validation, remediation tracking and retesting.</li> <li>Support security tool proof-of-concept (POC) activities and evaluate their effectiveness.</li> <li>Prepare technical assessment reports, executive summaries, risk ratings and remediation recommendations.</li> <li>Engage with application development, infrastructure, cloud and Information Security teams.</li> <li>Track remediation activities and validate closure of identified security findings.</li> </ul> <p> <strong>2. Mandatory technical skills</strong> </p> <p> <strong>Skill area</strong> </p> <p> <strong>Required expertise</strong> </p> <p>Web application security</p> <p>Grey-box penetration testing; OWASP Top 10; SQL injection, XSS, CSRF, SSRF, IDOR, authentication and session-management weaknesses, business logic flaws</p> <p>Mobile application security</p> <p>Android and iOS penetration testing; secure storage and communication; certificate pinning; reverse engineering; root/jailbreak detection; OWASP Mobile Top 10</p> <p>API and microservices security</p> <p>API Gateway testing, JWT, authentication and authorisation, rate limiting, mTLS, BOLA, excessive data exposure and business logic bypass</p> <p>Container and Kubernetes security</p> <p>Cluster, worker-node, control-plane, namespace and workload assessments; RBAC, privilege escalation, container escape, image security and hardening</p> <p>Istio service mesh</p> <p>mTLS, authentication and authorisation policies, ingress/egress gateways, service-to-service security and observability</p> <p>Network penetration testing</p> <p>Internal/external network attacks, firewalls, load balancers, exposed services, ingress points, cloud workloads and network devices</p> <p>Configuration reviews</p> <p>Linux, Windows, database servers, middleware, firewalls, ACLs, VPNs, IDS/IPS, network segmentation, logging and administrative access</p> <p>Security assessment and risk</p> <p>Threat modelling, vulnerability validation, risk rating, remediation recommendations, risk workshops and reporting</p> <p>Penetration-test vendor management</p> <p>Scoping, test planning, access coordination, findings validation, remediation tracking, retesting and reporting</p> <p> <strong>3. Experience requirements</strong> </p> <ul> <li>Overall experience: 79+ years in cybersecurity, penetration testing and security assessments.</li> <li>Proven experience in Banking and Financial Services (BFSI), digital banking, mobile banking and payment systems.</li> <li>Exposure to SWIFT, RTGS, PCI DSS, API security assessments and regulatory compliance reviews.</li> <li>Hands-on experience with banking applications, payment platforms, digital banking systems and their business logic.</li> <li>Experience in internal and external penetration testing, security reporting, risk workshops and POCs.</li> </ul> <p> <strong>4. Qualifications and certifications</strong> </p> <p>Graduate with following industry certifications are highly preferred:</p> <ul> <li>OSCP Offensive Security Certified Professional</li> <li>OSEP Offensive Security Experienced Penetration Tester</li> <li>OSWE Offensive Security Web Expert</li> <li>CREST certifications</li> <li>CISSP Certified Information Systems Security Professional</li> <li>CISM Certified Information Security Manager</li> <li>CCSP Certified Cloud Security Professional</li> <li>CCSK Certificate of Cloud Security Knowledge</li> <li>GWAPT GIAC Web Application Penetration Tester</li> <li>GPEN GIAC Penetration Tester</li> <li>CKS Certified Kubernetes Security Specialist</li> <li>Equivalent relevant industry certifications</li> </ul><p><strong>Desired Candidate Profile</strong></p>Graduate with following industry certifications are highly preferred:<br><ul> <li>OSCP Offensive Security Certified Professional</li> <li>OSEP Offensive Security Experienced Penetration Tester</li> <li>OSWE Offensive Security Web Expert</li> <li>CREST certifications</li> <li>CISSP Certified Information Systems Security Professional</li> <li>CISM Certified Information Security Manager</li> <li>CCSP Certified Cloud Security Professional</li> <li>CCSK Certificate of Cloud Security Knowledge</li> <li>GWAPT GIAC Web Application Penetration Tester</li> <li>GPEN GIAC Penetration Tester</li> <li>CKS Certified Kubernetes Security Specialist</li> <li>Equivalent relevant industry certifications</li> </ul>

<p>We are looking for a highly experienced Senior Cyber Security. Key Responsibilities Design, implement, and maintain enterprise cybersecurity solutions and security controls. Monitor security infrastructure and identify potential threats, vulnerabilities, and security incidents. Lead security incident response , investigation, containment, and remediation activities. Conduct vulnerability assessments, risk assessments, and security audits. Manage and improve SIEM, EDR/XDR, IDS/IPS, firewalls, and other security tools . Perform threat hunting and analyze security logs, alerts, and indicators of compromise. Develop and implement security policies, standards, procedures, and best practices. Conduct security reviews of networks, applications, cloud environments, and infrastructure. Support penetration testing and remediation of identified security vulnerabilities. Collaborate with IT, DevOps, Cloud, Application Development, and Infrastructure teams to integrate security into technology environments. Provide guidance on security architecture, network security, cloud security, and identity &amp; access management . Ensure compliance with applicable cybersecurity frameworks, regulatory requirements, and organizational security policies. Mentor junior security engineers and provide technical leadership. Prepare security reports, risk assessments, incident reports, and management dashboards.</p><p><strong>Desired Candidate Profile</strong></p><p>Experience : 10-15 years of relevant experience</p>

<p>The Head of Cyber Security leads the cyber defence operation covering Cyber Strategy &amp; Resilience, Security Design &amp; Engineering, Cyber Defense &amp; Operations and Security Services &amp; Remediation operations.</p><p>Overall accountable leader for cyber security within the First Line of Defence (1LOD), reporting to GM-Technology (CIO). Designated as the "Accountable Lead" for Cyber Security, responsible for the end-to-end delivery of the Bank's cyber security strategy, operations, and resilience capabilities .</p><p>Accountable for the effective design, implementation, and operation of all 1LOD cyber security controls across the enterprise, ensuring controls meet the objectives set by the Second Line of Defence (2LOD).</p><p>Provides strategic direction and leadership across all cyber security functions: Strategy &amp; Resilience, Security Design &amp; Engineering, Cyber Defense &amp; Operations, Security Services &amp; Remediation, and 1.5LOD Governance, Risk &amp; Compliance.</p><p>Accountable for ensuring the Bank's cyber security posture meets regulatory requirements (CBO), international standards, and operates within the Board-approved cyber risk appetite.</p><p>Represents the 1LOD cyber security function at executive management and Board forums, meetings as required, providing assurance on the effectiveness of the 1LOD control environment.</p><p>Partners with the 2LOD Head of Technology and Cyber Risk (CISD) to ensure constructive alignment between independent risk oversight and operational delivery, maintaining the integrity of the Three Lines of Defence model.</p><p>Accountable for the allocation of cyber security resources, budget, and investment priorities to maximise risk reduction and strategic value.</p><p>Champions a culture of security awareness across the enterprise and ensures cyber security is embedded in business and technology decision-making.</p><p>Accountable for the Bank's cyber incident response at the executive level, acting as the senior decision-maker during major cyber incidents and crisis events.</p><p>Drives the maturation of the Bank's overall cyber security capability, establishing measurable objectives and ensuring continuous improvement across all functions.</p><p><strong>Desired Candidate Profile</strong></p><ul><li>15+ years in cyber security, information security, or technology risk management, with a significant portion within banking or financial services</li><li>Minimum 10 years in senior leadership roles with executive committee and board-level reporting and engagement experience</li><li>Proven track record of building, leading, and maturing large, multi-disciplinary cyber security functions (50+ FTEs) in a regulated environment</li><li>Experience developing and executing enterprise cyber security strategies aligned to business objectives and regulatory requirements</li><li>Competent in leading teams operating across the full spectrum of cyber security domains: security architecture, engineering, defense operations (SOC/IR), GRC, and resilience</li><li>Experience managing regulatory relationships and ensuring compliance with financial sector cyber regulations (e.g., CBO requirements)</li><li>Track record of managing significant security investment portfolios (OpEx/CapEx) and demonstrating measurable risk reduction</li><li>Executive-level crisis management and incident command experience</li><li>Experience operating within a formal Three Lines of Defence model and partnering effectively with 2LOD and 3LOD (Internal Audit) functions</li><li>Bachelor's degree in Computer Science, Information Systems, Cyber Security, or related field (Master's degree or MBA preferred)</li><li>CISSP certification required</li><li>CISM certification highly advantageous</li><li>CISA or CRISC advantageous</li><li>Strategic leadership or executive management qualification beneficial (e.g., Cranfield, INSEAD, or equivalent)</li><li>Professional membership of relevant bodies (e.g., (ISC)², ISACA)</li><li>Knowledge of CBO regulations, Basel standards, and international cyber security frameworks (NIST CSF, ISO 27001)</li></ul>

<p>We are looking for experienced Senior Cyber Security Engineers to manage, monitor, configure and troubleshoot enterprise cybersecurity infrastructure and support incident response, vulnerability management and security operations.</p><p><strong>Key Responsibilities</strong></p><ul><li>Manage and support NGFW, WAF, EDR, SIEM, IAM, PAM, DLP, NAC, VPN, IDS/IPS, MFA, Secure Web Gateway and Email Security solutions.</li><li>Configure security policies, firewall rules, NAT and VPN.</li><li>Monitor security alerts, logs, dashboards and system health.</li><li>Investigate security incidents and perform RCA, containment, remediation and recovery.</li><li>Support vulnerability scanning, patching and remediation.</li><li>Perform system hardening and security configuration.</li><li>Troubleshoot network and security issues using tools such as Wireshark and TCPDump.</li><li>Coordinate with OEM/vendor support for critical issues.</li><li>Maintain SOPs, runbooks, incident reports and security documentation.</li><li>Support change management and operational reporting.</li></ul><p><strong>Required Skills</strong></p><ul><li>Strong hands-on experience in several of the following:</li><li>Palo Alto / Fortinet / Check Point / Cisco Firewall</li><li>SIEM Splunk / QRadar / Sentinel / ArcSight</li><li>EDR Defender for Endpoint / CrowdStrike / Cortex XDR / SentinelOne</li><li>F5 / FortiWeb / Imperva WAF</li><li>VPN / IPSec / IDS/IPS</li><li>IAM / PAM / DLP / NAC / MFA</li><li>Incident Response &amp; Vulnerability Management</li><li>TCP/IP and Network Security troubleshooting</li></ul><p><strong>Desired Candidate Profile</strong></p><p><strong>Qualification</strong></p><p>Bachelor's Degree in Cybersecurity, Information Security, Computer Science, IT or related field.</p><p><strong>Preferred Certifications</strong></p><p>PCNSE, Fortinet FCP/NSE, CCNA/CCNP Security, CISSP, CISM, CISA, CEH, Microsoft Security, Splunk or QRadar certifications.</p>

<p>The Senior Specialist Service Operations is a hands-on technical authority responsible for the day-to-day delivery, engineering, and continuous improvement of OTECH's core managed cybersecurity services with deep ownership of Vulnerability Management, Email Security, Web Application Security, and Endpoint Security service lines. The role serves as a senior point of escalation for the Service Operations team, drives complex client engagements end-to-end, and partners with the Team Lead on service strategy, technical governance, and team capability uplift. The Senior Specialist is expected to operate independently across the full-service lifecycle from onboarding and design through steady-state operations, incident response, and continuous service improvement while ensuring all delivery aligns with ITIL, ISO 20000, ISO 27001, and OTECH's contractual SLAs.</p><p><strong>RESPONSIBILITIES</strong></p><p><strong>Vulnerability Management Service Delivery</strong></p><ul><li>Own end-of-the-end delivery of the Vulnerability Management service across the client portfolio.</li><li>Triage and prioritize vulnerabilities using risk-based scoring, threat context, and asset criticality.</li><li>Maintain the monthly vulnerability tracker and executive dashboards with clear remediation ownership.</li><li>Lead client review meetings and advise on remediation strategy at technical and management levels.</li></ul><p><strong>Email Security Service Delivery</strong></p><ul><li>Lead design, hardening, and operational support of managed email security platforms across client environments.</li><li>Drive migration and onboarding projects include cutover planning and post-migration validation.</li><li>Diagnose and remediate email authentication issues (SPF, DKIM, DMARC) and advise clients on email security strategy.</li><li>Act as senior escalation points for complex email security incidents.</li></ul><p><strong>Web Application Security Service Delivery</strong></p><ul><li>Own configuration, tuning, and remediation work for managed WAF services across client applications.</li><li>Author and refine WAF policies aligned with OWASP Top 10 and client business logic.</li><li>Produce change and remediation documentation to support client change advisory boards.</li><li>Provide expert support for application onboarding from discovery through steady-state handover.</li></ul><p><strong>Endpoint Security Service Delivery</strong></p><ul><li>Lead operational delivery of managed endpoint security services including deployment, agent health, and coverage assurance.</li><li>Conduct coverage gap analyses across client estates and produces client-facing remediation plans.</li><li>Tune detection rules and response playbooks in coordination with the SOC.</li><li>Support endpoint-related incident response including triage, containment, and root-cause analysis.</li></ul><p><strong>Stakeholder Coordination and Customer Communication</strong></p><ul><li>Serve as the senior technical interface for assigned clients across the four service lines.</li><li>Produce executive-level reports, technical briefings, and client review packs in English and Arabic where required.</li><li>Lead client onboarding and operational handover activities.</li><li>Proactively escalate risks, service degradation, and contractual deviations to the Team Lead.</li><li>Represent OTECH in client CAB, security review, and operational governance meetings.</li></ul><p><strong>Leadership, Mentoring, and Team Capability</strong></p><ul><li>Act as a technical mentor and escalation point for Specialist and Junior Specialist team members.</li><li>Lead peer knowledge-transfer sessions, technical workshops, and capability uplift initiatives.</li><li>Support the Team Lead in capacity planning, workload balancing, and individual development planning.</li><li>Deputize for the Team Lead in operational meetings and technical reviews when required.</li></ul><p><strong>Learning and Development</strong></p><ul><li>Maintain deep, current awareness of OTECH service portfolios, client contracts, and threat landscape developments.</li><li>Pursue advanced certifications across the four service pillars.</li><li>Actively contribute to internal communities of practice and represent OTECH at industry events where appropriate.</li></ul><p><strong>Desired Candidate Profile</strong></p><ul><li>Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent. Master's degree preferred.</li><li>ITIL v4 Foundation mandatory.</li><li>At least one professional security certification required (e.g. CISSP, Security+, CySA+, CISM, CEH, OSCP, or GIAC).</li><li>Relevant vendor and technology certifications across vulnerability management, email security, web application security, and endpoint security platforms are strongly preferred.</li><li>5-7 years of hands-on experience in cybersecurity operations or managed security service delivery, with demonstrated technical depth across vulnerability management, email security, web application security, and endpoint security.</li><li>Prior MSSP or large enterprise SOC environment exposure is strongly preferred.</li><li>Advanced operational and engineering knowledge across the four service pillars: vulnerability management (scanning, risk-based prioritization, remediation tracking, and executive reporting); email security (platform administration, hardening, migration, and email authentication including SPF, DKIM, and DMARC); web application security (WAF policy design, tuning, and OWASP Top 10 mitigation); and endpoint security (EDR/XDR deployment, tuning, coverage assurance, and incident support).</li><li>Strong working knowledge of ITSM platforms, ITIL processes, scripting for automation and reporting, and client-facing communication including executive-level reporting.</li><li>Arabic/English bilingual capability is an advantage.</li></ul>

<p>We are looking for an experienced Senior Cyber Security Engineer . Key Responsibilities Design, implement, configure, and maintain Cisco ACI and UCS infrastructure. Manage and troubleshoot Cisco ACI fabric, tenants, VRFs, bridge domains, EPGs, contracts, and policies. Configure and manage Cisco UCS Manager , Fabric Interconnects, server profiles, and connectivity. Implement network security controls across data center environments. Monitor network and security infrastructure for vulnerabilities, threats, and performance issues. Troubleshoot complex ACI, UCS, LAN, VLAN, routing, switching, and connectivity issues. Configure and manage network segmentation and micro-segmentation using Cisco ACI. Integrate ACI with external networks, firewalls, load balancers, and virtualization platforms. Support security incident investigation and remediation related to network infrastructure. Perform vulnerability assessments and implement security hardening measures. Develop and maintain network/security architecture, design documents, SOPs, and operational procedures. Automate infrastructure and security tasks using scripting and network automation tools. Collaborate with Network, Security, Cloud, Infrastructure, and DevOps teams. Ensure infrastructure compliance with organizational security policies and industry best practices. Participate in infrastructure upgrades, migrations, DR activities, and capacity planning.</p>

<p>Description</p><p>We are seeking a highly skilled and experienced Senior IT Engineer - Network and Security with a strong background in security and networking products, preferably based on Fortinet product portfolio&nbsp;</p><p>The ideal candidate will have at least 10 years of experience, preferably within the GCC region, and possess certifications in relevant networking technologies and products&nbsp;</p><p>This role requires deep technical knowledge, excellent communication skills, and the ability to work closely with presales team and customer to implement and support network and security solutions&nbsp;</p><p>The candidate will play a pivotal role in ensuring timely project completions and maintaining optimal client service levels</p><p><br></p><p>Responsibility &amp; Scope</p><p>1 Implement and Support security and networking solutions based on Technical Proposals,&nbsp;</p><p>HLD and Scope of Work/Support&nbsp;</p><p>2 Create LLDs, As-Built Documentation, Configuration and Troubleshooting SOPs and&nbsp;</p><p>Explain complex technical concepts in a clear and concise manner to non-technical&nbsp;</p><p>stakeholders&nbsp;</p><p>3 Engage with customers and pre-sales to understand the technical requirements and&nbsp;</p><p>provide recommendations during Implementation and Support engagements&nbsp;</p><p>4 Work closely with Vendor/OEM TAC and SE Teams on Implementation journey&nbsp;</p><p><br></p><p>&nbsp;Additional Responsibilities&nbsp;</p><p>1 Strong analytical and problem-solving skills&nbsp;</p><p>2 Ability to collaborate and communicate effectively with internal teams and external clients&nbsp;</p><p>3 Passion for innovation and continuous learning with Strong initiative and team leadership&nbsp;</p><p>4 Ability to manage and coordinate multiple projects simultaneously</p><p><br></p><p>Requirements</p><p>In-depth knowledge of security technologies and products, including Firewalls, VPNs,&nbsp;</p><p>Load Balancers, SOCs, NOCs, SDWAN, SASE, SIEM, SOAR, ADC, WAF, EDR, XDR,&nbsp;</p><p>NDR, Email Security, and AD Security&nbsp;</p><p>&nbsp;</p><p>Strong understanding of networking technologies and standards, including Wireless&nbsp;</p><p>(80211 standards, Wireless Security), L2, L3, and PoE&nbsp;</p><p><br></p><p>&nbsp;Prepare and maintain comprehensive documentation for implemented solutions&nbsp;</p><p><br></p><p>Provide training and technical resources to internal teams and customers&nbsp;</p><p><br></p><p>Act as a customer advocate, focusing on their security requirements and staying updated&nbsp;</p><p>on networking trends&nbsp;</p><p><br></p><p>&nbsp;Ensure proposed solutions align with the latest security and networking best practices</p><p><br></p><p>Bachelor’s Degree in Science / Computer Science / Information Technology or Cyber&nbsp;</p><p>Security</p><p><br></p><p>10+ years of relevant Experience in Cyber Security and Networking&nbsp;</p><p><br></p><p>One or more of Fortinet NSE Levels of Certification - Mandatory&nbsp;</p><p><br></p><p>&nbsp;Cisco Certified Network Administrator / Professional -&nbsp; CCNA / CCNP is Preferred&nbsp;</p><p><br></p><p>Value Add: Palo Alto and Cisco Security Certifications</p><p><strong>Desired Candidate Profile</strong></p><p><br></p>

<ol><li><p><strong>Firewall Management:</strong> Configure, manage, and maintain FortiGate firewalls across the Ministry HQ and branch sites, including security policies, NAT, traffic inspection, and UTM features.</p></li><li><p><strong>Secure Remote Access:</strong> Design, deploy, and support site-to-site VPN, SSL VPN, and remote access, and implement ZTNA (Zero Trust Network Access) to secure user and device access.</p></li><li><p><strong>Wireless Network Administration:</strong> Manage Fortinet access points through FortiGate wireless controllers, including SSID setup, WPA2/WPA3 encryption, and authentication methods such as 802.1X, PSK, and captive portal.</p></li><li><p><strong>Centralized Policy and Configuration Management:</strong> Use FortiManager to manage devices, push configurations, and keep security policies consistent across all sites.</p></li><li><p><strong>Logging, Monitoring, and Reporting:</strong> Use FortiAnalyzer to collect and analyze logs, track network performance and alerts, and produce regular security and compliance reports.</p></li><li><p><strong>Automation and AI-Assisted Operations:</strong> Apply Fortinet’s AI-assisted management tools to support policy orchestration, configuration compliance checks, and automated workflows that cut manual effort and errors.</p></li><li><p><strong>Security Posture and Vulnerability Management:</strong> Run security reviews to find misconfigurations, outdated rules, and vulnerabilities, then recommend and carry out improvements to strengthen the network.</p></li><li><p><strong>Best Practices and Compliance:</strong> Make sure all deployments follow Fortinet best practices and the organization’s security policies and standards, including audit and regulatory requirements.</p></li><li><p><strong>Incident Response and Troubleshooting:</strong> Act as the escalation point for network and security incidents, diagnose root causes, restore services quickly, and meet the SLAs set for the FMS contract.</p></li><li><p><strong>Documentation, Training, and Customer Support:</strong> Maintain network diagrams, configuration records, and SOPs, train internal teams and customer staff, and work as a customer advocate to understand and address their security needs.</p></li></ol><p><strong>Desired Candidate Profile</strong></p><ol><li><p><strong>Experience:</strong> 10+ years in IT networking and security, with at least 5 years of hands-on work managing FortiGate firewalls across multi-site (HQ and branch) environments, ideally in a government or large enterprise setting.</p></li><li><p><strong>Fortinet Technical Expertise:</strong> Strong working knowledge of FortiGate, FortiManager, and FortiAnalyzer, plus Fortinet wireless (FortiAP). Proven skills in site-to-site VPN, SSL VPN, ZTNA, WPA2/WPA3, and 802.1X authentication.</p></li><li><p><strong>Certifications:</strong> Fortinet NSE 4 (mandatory in practice), with NSE 6 or NSE 7 preferred. Other certifications such as CCNP Security, CompTIA Security+, or CISSP are an added advantage.</p></li><li><p><strong>Security and Compliance Mindset:</strong> Experience in vulnerability assessment, security audits, and policy compliance, with the ability to spot misconfigurations and recommend improvements. Exposure to ISO 27001 environments is a plus.</p></li></ol>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>CCDS is seeking an experienced Network Security Engineer to join our team for a one-year, project-based contract in Sohar, Oman .<br> Employment Details: Location: Sohar, Oman Contract Type: One-year project-based contract Work Arrangement: Full-time, on-site Key Responsibilities: Configure, manage, and troubleshoot enterprise network security solutions.<br> Administer and optimize Palo Alto and Fortinet security products.<br> Monitor network performance, security events, and potential threats.<br> Implement firewall policies, VPNs, routing, switching, and access-control rules.<br> Investigate network and security incidents and provide timely resolutions.<br> Perform system upgrades, security hardening, and configuration reviews.<br> Maintain accurate technical documentation and operational reports.<br> Coordinate with project teams, vendors, and customers to meet service requirements.<br> Mandatory Requirements: Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related discipline.<br> Proven professional experience in network security engineering.<br> Strong hands-on experience with Palo Alto firewalls and security solutions .<br> Solid experience with Fortinet technologies.<br> Strong knowledge of routing, switching, VPNs, network protocols, and firewall management.<br> Excellent troubleshooting, communication, and documentation skills.<br> Ability to work full-time and on-site in Sohar, Oman .<br> Mandatory Certifications: Cisco Certified Network Professional (CCNP) Fortinet NSE 7</span> </div>