Virtua Advanced Solution Hiring for Information Security Management System Resource (Minimum 10+ Experience) Job at Dubai Full Time

1. Have good understanding in ISMS – ISO 27001, ISO 22301:2019, ISO/IEC 20000-1:2018 / ISR

2. Good Understanding of ITIL process i.e. Incident, Change, Request and problem Management.

3. Hands on experience in ISMS implementation, management and Security Incident handling.

4. Experience in conducting Problem Management, RCA.

5. Ability to handle critical issues/problems.

6. Good documentation skills.

7. Strong analytical and troubleshooting skills.

8. Knowledge on Application Security, Database Security and Risk management.

9. Gap assessment of ISMS and Business Continuity Management for ISR.

10. Implementation of ISR and ISMS across DUBAI SOUTH.

11. Risk management and risk review.

12. ISMS Maintenance.

13. Policies and procedure creation, review and updates.

14. Framework creation and implementation.

15. Internal audit scheduling and continual improvement.

16. External audit support and prepare CAPA.

• Bachelor’s Degree, Engineering, or related degree required.
• Fluency in English is a must.
• Industrial certifications.
• A minimum of ten years of IT experience, with five years in information security.
• Gap assessment of ISMS, Risk management, risk review, ISMS Maintenance.
• CV of the resources.
• Experience certificate of the resources.
• Detailed information about the similar projects involved in the past.
• Training certificates.

Additional Information

• Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program to ensure that the integrity, confidentiality and availability of information is owned, controlled or processed by the organization.
• Manage the enterprise’s information security organization, consisting of direct reports and indirect reports (such as individuals in business continuity and IT operations). This includes hiring, training, staff development, performance management and annual performance reviews.
• Develop, maintain and publish up-to-date information security policies, standards and guidelines. Oversee the approval, training, and dissemination of security policies and practices.
• Create, communicate and implement a risk-based process for vendor risk management, including the assessment and treatment for risks that may result from partners, consultants and other service providers.
• Create and manage information security and risk management awareness training programs for all employees, contractors, and approved system users.
• Work directly with the business units to facilitate IT risk assessment and risk management processes, and work with stakeholders throughout the enterprise on identifying acceptable levels of residual risk.
• Provide regular reporting on the current status of the information security program to enterprise risk teams, senior business leaders and the board of directors as part of a strategic enterprise risk management program.
• Coordinate information security and risk management projects with resources from the IT organization and business unit teams.
• Ensure that security programs comply with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
• Define and facilitate the information security risk assessment process, including the reporting and oversight of treatment efforts to address negative findings.
• Develop and oversee effective disaster recovery policies and standards to align with enterprise business continuity management program goals. Coordinate the development of implementation plans and procedures to ensure that business-critical services are recovered in the event of a security event. Provide direction, support and in-house consulting in these areas.
• Assist resource owners and IT staff in understanding and responding to security audit failures reported by auditors.
• Manage security issues and incidents and participate in problem and change management forums. Ensuring timely reporting and adequate participation in investigation for ICT security incidents, with DS ISSC and / or Law Enforcement agencies as applicable.
• Work with various stakeholders to identify information asset owners to classify data and systems as part of a control framework implementation.
• Work with the IT and business stakeholders to define metrics and reporting strategies that effectively communicate successes and progress of the security program.