Manager Security Implementation and Operations (UAE National)

The purpose of this position is to be responsible for the technical delivery and managing of the Information Security Risk Management activities and cross-domain Risk Management projects, across multiple Telecoms Systems and other Technology Domains, including the initial technical risk assessments. Reporting to the Director - Risk Management & Compliance; Identifying any gaps in the security policies, processes, procedures, documentation and evaluate with the security compliances and industry standards.

Key Accountabilities

• Managing the Risk Management exercise across all Technology domains.
• Managing Technology Risk Management on Fixed Core/PSTN/IPTV/IPT/VOIP/Mobile 2G/3G, ensuring compliance with security standards such as ISO27001 and ITU-X.805 and submitting all findings to senior management of ISRM in an agreed format.
• Responsible for communicating the findings to the respective technical team, providing advice and guidelines to mitigate the risk.
• Work with the Director - Security Risk Management & Compliance to ensure that all Risk Management & Security Assessment (internal and external) issues are understood and raised with a proper remediation plan.
• Provide Risk Management & Security Assessment awareness among the Technology Unit to ensure that all technical risk issues are understood and raised with a proper remediation plan.
• Oversee the strategies employed including transferring the Risks & Observations to another party, avoiding the risk, reducing the negative effect of the risk, and accepting some or all of the consequences of a particular risk.
• Contribute & advise in Strategy formulation and implementation oversight.
• Develop automated techniques to provide an executive-level security risk management dashboard to the Technology Unit.
• Develop Risk & Security Assessment methodologies, Risk & Security Assessment plans, and Risk & Security Assessment work programs and ensure the quality assurance of Risk & Security Assessment functionality.

Qualifications

• Minimum Bachelor’s degree in Telecom Engineering, Information Security, Information Systems, CISSP, CRISC, CISA, LA ISO 27001, CEH.
• Desirable: CCNP, MCSE, PMP.

Experience

• Minimum 7 years of experience in information and security Risk Management, and corporate governance role in the Telecom (PSTN and GSM, Video and IT) industry.

Skills

• Take personal responsibility for Risk Management issues.
• Analyze information accurately.
• Display sound judgment and solve problems.
• Present complex information in an understandable way.
• Influence decision-makers.