Senior Analyst - Information and Cybersecurity Operations

About the role:
Ensures the company's Information Security is in compliance with federal and state laws, regulations, and Central Bank’s system’s standard industry practice, policies, and procedures.

Responsibilities:

• Review the daily security logs for critical applications such as Equation, Prime, Online, Raknet, Beam, etc.
• Maintain a schedule for information technology policies and procedures and proactively give comments to improve the policies and procedures for the IT division.
• Prepare and maintain Intranet pages of the IT division.
• Perform the User ID cleanup once a year and conduct specific application cleanup when needed.
• Organise information security awareness sessions on the intranet and maintain the statistics about it for the IT division.
• Verify information security compliance by scheduling and conducting surprise checks (e.g. restoration of backup tapes, user’s desktop, configuration details of computing devices such as routers and firewalls, password length in the OU, etc.).
• Prepare patch management schedule for various applications and operating systems and liaise with information technology departments for effective implementation.
• Schedule third-party penetration tests and coordinate with IT users about the results.
• Assess the information security events and inform the risks that are attached to the incident.
• Verify the Information Security approvals mailbox and ensure that approval requests are responded to.
• Verify the effectiveness of the Information Security activities along with Infosec team members.
• Ensure IT security processes are implemented and adhered to across the company's computing environment.
• Prepare and maintain Information Security and IT assurance Dashboard and publish it regularly.
• Prepare and constantly update information security-related events that are happening worldwide for easy reference.
• Get the separation list from the HR department and verify that user IDs are revoked on a timely basis.
• Ensure antivirus updates have been implemented on a weekly/monthly basis.
• Review the internet usage of users to verify compliance with the internet usage policy of the company.
• Review the administrator’s user IDs and privileges assigned to various business applications and various technology tools that are implemented in the corporate computing environment.
• Assist the ISM in scheduling audit responses on behalf of the IT division.

What We’re Looking For:

• Education: University degree or equivalent qualification
• Minimum experience: University degree or equivalent qualification

What You Should Have:

• Technical competence in Quality Assurance, Information Systems Auditing, Networking, Database Management, Operating System & Application Development.
• Good standard of oral and written communication to issue instructions or guidelines, make proposals, issue internal circulars, and draft correspondence.
• Analysing skills on ACL / Business Objects / Database Querying tools to substantiate the work required to be done.
• Knowledge of relevant UAE Central Bank and Government policies and regulations relating to compliance responsibility.