Officer - IT Security Compliance

Role Overview

Officer - IT Security Compliance at Emarat (Emirates General Petroleum). The role establishes and monitors IT security policies and compliance measures within the organization, ensuring that all IT operations adhere to regulatory requirements and internal standards.

Role Purpose

Establish and monitor IT security policies and compliance measures within the organization, ensuring that all IT operations adhere to regulatory requirements and internal standards.

Key Responsibilities

Policy & Framework Development

• Develop and implement IT security policies and compliance frameworks.
• Assist in the development and maintenance of IT security policies, procedures, and guidelines to ensure compliance with regulatory requirements and industry best practices.

Security Infrastructure & Monitoring

• Monitor the implementation and configuration of security aspects of the IT infrastructure.
• Perform regular security audits of IT systems and infrastructure to identify vulnerabilities and ensure compliance with established security policies and standards.
• Develop and implement assessment methodologies to evaluate the effectiveness of security controls and compliance measures.

Incident Response & Investigation

• Lead investigations into security incidents, breaches, or non-compliance issues, documenting findings and recommending corrective actions.
• Coordinate with relevant teams to respond to security incidents, ensuring timely resolution and minimal impact on operations.

Third-Party & Vendor Management

• Oversee the management of outsourced security services and ensure compliance with contractual obligations.
• Manage relationships with third-party security service providers, ensuring that they meet contractual obligations and compliance requirements.
• Collaborate with vendors to enhance security measures, including the implementation of security information and event management (SIEM) solutions.

Compliance & Reporting

• Prepare and present detailed audit reports, compliance assessments, and incident investigation findings to the CIO and other stakeholders.
• Maintain comprehensive documentation of security policies, procedures, audit results, and compliance activities for reference and regulatory purposes.

Training & Awareness

• Ensure that all IT staff are aware of and adhere to security policies and procedures.
• Develop and deliver training programs to educate employees about IT security policies, compliance requirements, and best practices.
• Promote a culture of security awareness within the organization, ensuring that all employees understand their role in maintaining security.

Qualifications & Experience

• Bachelor's degree in computer science, information technology, or a related field is preferred.
• Minimum of 6 years' experience in security and compliance management with a strong understanding of operating systems and networks.
• Minimum of 4 years of experience may be considered for exceptional candidates of high caliber.