- Develop and maintain the cybersecurity architecture guidance and governance by documenting design specifications, installation instructions, and other system-related information to address information security engineering/architecture requirements.
- Collaborate with business stakeholders and technical stakeholders (solution, infrastructure, and application architects) to perform security architecture risk assessments.
- Ensure operational and incident trends in cyber security are considered in developing security architecture requirements and recommendations.
- Provide recommendations for advancing the enterprise security architecture practice, security policies, and security control standards to enhance operational practices.
- Responsible for the engineering, design, implementation, maintenance, analysis, and administration of security technologies.
- Participate in and lead projects for security requirements, network design reviews, and security testing for network, systems, and other IT teams.
- Responsible for creation and maintenance of security architecture diagrams and documentation.
- Coordinate with systems, network and development team to ensure network security standards are being followed and implemented correctly.
REQUIREMENTS - Bachelor's degree in Computer Science, Information Technology or similar field, or equivalent experience
- 12+ years of information security experience with a focus on network security, application and architecture.
- 6+ years of security architecture experience.
- Specific Information Security related experience including DLP, IDS/IPS, Firewalls, SEIMs, FIM, IDAM, PIM and vulnerability assessment.
- Knowledge of email security gateway, Content filtering, Data Classification solutions.
- Knowledge of HSM and tokenization technologies
- In-depth knowledge of mapping business requirements to technology and ability to define security architecture from scratch.
- Knowledge of virtualization and VDI security
- Knowledge of common security vulnerabilities such as: XSS/CSRF, SQL Injection, Buffer Overflow, and DoS attacks.
- Understanding of networking, operating systems such as Linux and Windows..
- Demonstrated knowledge of security industry standards and best practices such as OWASP and NIST, ISO 27001, PCI-DSS and UAE Central Bank PSP regulation,
- NESA / DESC / ADSIC
- Excellent interpersonal, analytical and problem-solving skills.
- Proven ability to manage multiple tasks/projects.
- CISSP, CISM , CEH, ISO 27001 or other relevant certification preferred
Personality traits:
- Good verbal and written communication skills, strong command of English Language. Fluent in Arabic is advantageous.
- Must be able and prepared to make Decisions in a difficult and pressured environment.
- Good listener, polite and always positive
ABOUT THE COMPANY Founded in 1996, Halian is an IT services company with a strong track record of delivering value for our customers across the UK, Europe, The Middle East and Africa.
The experience we have gained means that we can help our clients reduce information technology costs, increase IT systems performance, and free up valuable internal resource to focus on core business activities. Our knowledge base covers a variety of industry sectors including Government, Healthcare, Telecommunications and Pharmaceuticals, as well as a specialist Financial markets capability in our Luxembourg office.
We operate with a culture of openness and trust that helps us to develop strong working relationships with our clients and with our core technology partners Dell, Oracle, Red Hat and Symantec.
Our three key service offerings of Managed Services, Resourcing Services and Professional Services can be used independently or integrated to provide a truly comprehensive service.
