Overview
Information Security Officer – Buna Jobs in UAE at Arab Monetary Fund
Title: Information Security Officer – Buna
Company: Arab Monetary Fund
Location: UAE
Type: Contract
Category: Security, IT/Tech
Arab Monetary Fund
in Abu Dhabi, Abu Z aby, United Arab Emirates
Posted by: Mohamed Moniem Recruiter View profile & contact As the implementation phase of Buna, formerly known as the Arab Regional Payment System (ARPS), project picks up momentum, we are looking for a responsible Information Security Officer- Buna to join our founding team. Duties of the Information Security Officer include developing and managing Buna’s information security policies & strategy to protect Buna from security threats and cyber-attacks. The job holder is also responsible for ensuring operational compliance with all standards and regulations and driving business continuity. This position will report to the Chief Risk & Compliance Officer.
In this context, the following sections detail the main qualifications, skills and responsibilities related to this position:
Job Responsibilities
Cyber Security Policies and Procedures Development
Develop and monitor a strategic, comprehensive enterprise information / cyber security risk management program (including strategy, policies, standards, processes, and guidelines) to ensure protection of Buna digital and data assets
Create, maintain and publish up-to-date information security policies, standards and guidelines
Ensure cyber security policies, procedures and best practices are communicated across the organization
Security Operations Implementation
Implement and lead the strategy for managing and reporting security incidents and oversee investigations of reported security breaches
Identify, manage, and minimize information security risks, and provide relevant and timely reports that drive business decisions
Ensure appropriate administrative, physical and technical safeguards are in place to protect information assets from internal and external threats
Identify, introduce and implement appropriate procedures to test technical safeguards on a regular basis
Oversee the development and implementation of appropriate and effective controls to mitigate identified threats and risks
Align the security and enterprise (reference) architectures, ensuring security requirements are implicit in these architectures
Manage the daily operations for InfoSec architecture, engineering, operations center, secure development lifecycle, and governance functions across on-premise, hybrid cloud, and cloud capabilities
Information Security Program Management
Report regularly on current status of the information security program
Keep abreast of latest cybersecurity technologies and innovations
Create and manage a targeted information security awareness training program
Manage InfoSec vendor relationships and optimizing value from these relationships
Research, investigate and implement measures that address data security risks and potential losses
Identity and Access Management
Monitor and maintain application user access across the IT portfolio
Maintain on time on-boarding and off-boarding for identified IT environments
Cybersecurity Incident Mitigation
Follow-up on detected security issues and implement solutions to mitigate risks
Oversee threat monitoring activities, take preventive actions and advise relevant stakeholders on the appropriate course of action and response to such threats
Own the cybersecurity incident and vulnerability management processes from design to implementation
Threat Analysis and Monitoring
Oversee incident response planning as well as the investigation of security…