Cyber Security Officer

Role Overview

Cyber Security Officer at Zain Group, supporting the organization's cybersecurity operations by monitoring, identifying, investigating, and responding to security threats and incidents while implementing and administering security controls, tools, and processes to protect Zain Bahrain platforms.

Role Purpose

To protect Zain Bahrain's platforms and infrastructure by monitoring and responding to security threats, administering cybersecurity solutions, supporting compliance activities, and continuously improving the organization's overall cybersecurity posture.

Key Responsibilities

Incident Response & Monitoring

• Investigate and respond to cybersecurity incidents.
• Monitor and identify security threats across the organization.
• Analyze security alerts and identify risks.

Security Administration & Implementation

• Administer and improve existing cybersecurity solutions such as XDR, SIEM, Email Security, VA platforms, awareness training platforms, DLP, and Threat Intelligence.
• Onboard and introduce new security solutions.
• Participate in procurement, installation, testing, and implementation of cybersecurity-related security projects.

Vulnerability & Risk Management

• Identify vulnerabilities and track them with relevant owners.
• Formulate internal security and risk assessment plans and processes.
• Coordinate remediation with IT and other teams.

Compliance & Governance

• Build and maintain Zain Bahrain cybersecurity policies and MSBs.
• Support compliance and audit activities and various security assessments.

User Support & Awareness

• Provide awareness training and technical support for users with varying levels of cybersecurity knowledge and competence.

Planning & Operations

• Develop operations work plan to support all operations activities.
• Perform any other related duties as assigned or needed.

Qualifications & Experience

• Bachelor degree in Computer Science, Cyber Security, or any relevant field.
• 1 to 3 years' experience in a similar area, preferably in the Telecom field.

Skills & Competencies

• Good knowledge of network and endpoint security, firewalls, SIEM, EDR/XDR, and access controls.
• Understanding of vulnerability management, security monitoring, incident response, and threat analysis.
• Familiarity with security frameworks and standards such as ISO 27001, NIST, and CIS Controls.
• Basic knowledge of cloud security, Active Directory/Entra ID, Windows, and Linux security.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to analyze security alerts, identify risks, and coordinate remediation with IT and other teams.
• Familiarity with policy formulation and review.