IT Security and Compliance Officer

The security compliance officers role is to ensure the secure operation of the B&S information assets in accordance with our internal processes procedures and compliance requirements as per the relevant ISO standards regulatory frameworks applicable to B&S and industry best practices.

Key Responsibilities

• Oversee and improve the information security programs including data protection risk management compliance and information security testing.
• Establish information security audit policies and procedures relevant to CMMC SOC2 ISO 27001 ISO 22301 ISO 38500 PCIDSS.
• Develop implement and maintain internal ITSC audit policies and procedures in accordance with local and international best practices.
• Conduct scheduled audits on information assets and processes as required in order to maintain certifications and compliance certificates.
• Evaluate compliance of B&S processes procedures systems and applications against the requirements of ISO 27001 ISO 22301 ISO 38500 PCIDSS CMMC and industry best practices.
• Monitor advancements in information security and privacy laws to ensure organizational adaptation and compliance.
• Prepare audit reports required for senior management regulators and other relevant stakeholders.
• Assist with initiatives relevant to compliance certification and regulatory bodies.
• Review all new products systems or processes to ensure compliance against required standards frameworks and best practices.
• Deploy manage and maintain security audit platforms.
• Collaborate with the IT Risk & Threat Analyst and Cybersecurity Analyst to ensure threats and vulnerabilities are promptly identified and communicated to relevant business stakeholders for remediation.

Key Deliverables

• Develop internal audit policies and procedures in accordance with local and international best practices
• Conduct internal audits as per the internal ITSC audit schedule and framework
• Evaluate compliance of B&S processes procedures systems and applications against the requirements of B&S certification initiatives
• Deliver audit reports/findings and status of the remediation of audit findings to stakeholders
• Propose continuous service improvements based on audit findings

Qualifications :

• Bachelors degree in Computer with IT audit or compliance experience
• 5 years of IT experience with a focus on security and compliance
• Knowledge and understanding of ISO 27k PCIDSS GDPR NIST ISO Certifications and SOC2 information security standards and/or frameworks
• Experience writing policies procedures and controls in one or more standards/frameworks
• Knowledge of computer networking concepts and protocols and network security methodologies
• Knowledge of risk management processes cyber threats and vulnerabilities
• Experience with risk management in both a compliance and security context
• Ability to work in a fastpaced environment and the skills to deal with ambiguity
• Ability to handle multiple competing priorities
• Highlevel of attention to detail and be a selfstarter with the ability to work independently multi task and adjust to shifting priorities
• Professional information security certifications like ISO 27001 CISA CISM or other relevant securityrelated designations would be an advantage

Additional Information :

We offer you

• Competitive salary fitting with your experience along with discretionary annual performancebased bonus  
• Company sponsored visa along with health insurance 
• Leave benefits as per UAE labour law  
• Annual return airticket to your home country 
• Opportunity for professional growth and development
• Dynamic and collaborative work environment 
• Being a part of leading International trading company with global presence

Remote Work :

No

Employment Type :

Fulltime

Key Skills
Network security,Risk Management,Compliance,Information Technology,Security Requirements,ISO,Security Solutions,Windows,Access Control,Vulnerability Assessments,SOX,Regulatory Agencies,Business Units,Incident Response,Access Management
Experience: years
Vacancy: 1