Cybersecurity Specialist

Role Overview

Cybersecurity Specialist at Emirates Flight Catering.

Role Purpose

Protect the organization's information systems, assets, and data through comprehensive security assessments, policy enforcement, incident response, and continuous monitoring to ensure compliance with relevant regulations and standards.

Key Responsibilities

Security Assessment & Vulnerability Management

• Conduct regular security and vulnerability assessments to identify and evaluate potential risks to information systems.
• Conduct regular code reviews and penetration testing of various cybersecurity systems and applications for identifying vulnerabilities and improving software quality.
• Perform Vulnerability Assessment and Penetration Testing (VAPT) across the organization's infrastructure.

Policy & Governance

• Develop, implement, and enforce security policies, procedures and controls to protect the organization's assets and ensure compliance with relevant regulations and standards (e.g., ISO27001, ISR, ICS and NESA).
• Ensure adherence to IT GRC methodologies and security frameworks.

Incident Response & Monitoring

• Develop and implement effective incident response plans through established protocols to minimize damage and recovery time.
• Monitor network traffic for suspicious activities for maintaining a secure environment and early threat detection.
• Use security information and event management (SIEM) tools to provide a centralized view of security-related data and simplify monitoring and analysis.

Training & Awareness

• Conduct security awareness training for employees to promote best practices for data security throughout the organization.

Reporting & Compliance

• Prepare regular reports on security status and incidents for ongoing monitoring and review of compliance efforts.

Stakeholder Collaboration

• Collaborate with IT teams to secure infrastructure and applications tailored to the organization's specific needs.
• Provide input on security implications for new projects or systems to ensure security considerations are integrated into the design and implementation phase.

Qualifications & Experience

• Bachelor's degree in Computer Science, Mathematics, or equivalent.
• Minimum 5 years of IT experience with extensive focus on IT Security covering IT Audit, IT Risk and Cybersecurity.
• Professional certifications in Cybersecurity: CompTIA Security+, Certified Ethical Hacker (CEH), or CompTIA Cybersecurity Analyst (CySA+).
• Experience working in Information Security/Risk in a global organization with complex or hybrid IT environments.
• Strong knowledge of IT Infrastructure covering on-premise and cloud environments, BYOD, and application development.
• Demonstrated experience following IT GRC methodologies.

Skills & Competencies

• Security Frameworks: ISO 27001, ISO 30000, CIS Critical Security Controls, NESA.
• ITSM and COBIT skills.
• Vulnerability Assessment and Penetration Testing (VAPT).
• Security Information and Event Management (SIEM) tools.
• Strong problem-solving and analytical skills.
• Strong time management skills.
• Strong interpersonal and communication skills.