Job Purpose
Plan, develop, implement and manage a comprehensive corporate, as well as regulated CyberSecurity (CS) Redteam (ethical hacking) and CyberSecurity Assurance program to ensure the confidentiality, integrity and availability of information owned, controlled or processed by or on behalf of the Emirates Group. The role is accountable for providing end to end CyberSecurity assurance activities across the entire Group. This includes redteaming, penetration testing and security-by-design as well as privacy-by-design accountability & oversight within the IT delivery teams under the Emirates Group.
Job Outline:
- Drive and own CyberSecurity redteam, penetration testing as well as CS Assurance activities providing consulting services to all global and local entities under the Emirates Group including Application Assurance, Web and Mobile Assurance, Infrastructure Assurance, Compliance Assurance and Program Assurance.
- Deliver a global strategy and roadmap to implement skills and technologies delivering the respective services to The Emirates Group with a focus on faster identification and remediation throughout the whole Lifecycle. This part of strategy is a core element of the overall cybersecurity posture of the group representing the preventive side of the security strategy.
- Overall responsibility of implementing and embedding security, privacy and regulatory compliance by design principles (shifting CyberSecurity left in our application live cycle) ensuring these fundamental requirements are embedded into the IT organisation.
- Provide monthly executive reporting (manage through data) on the current state of CyberSecurity by design and drive remediation where required.
- Provide CyberSecurity consulting to the business in projects. Articulating and communicating CyberSecurity concepts/information effectively to senior business stakeholders on all levels.
- Take overall responsibility for continuous CyberSecurity Assurance improvement in IT and the Business through embedding Assurance capabilities into the Agile Release Trains (ARTS) as well as a delivering on a roadmap to embed DevSecOps into the Emirates IT Culture to drive the development of secure systems that protect the Emirates Group from CyberSecurity threats long term. This role is accountable for the education and continuous upskilling of business stakeholders (also including IT) and ensuring that CyberSecurity and Assurance and prevention is part of the Emirates Group culture.
- Lead, coach, and mentor the team of high performing CyberSecurity professional?s individuals, providing servant leadership whilst facilitating professional development and opportunities for growth. Foster a climate of systematically embedding a culture of security, quality and continuous improvement, ensuring the customer needs are met and expectations exceeded whilst supporting the team through continuous, transparency and openness, to grow and maintain trust with the wider business. Enable optimal, fit for purpose staffing by ensuring the Group CyberSecurity Assurance team is adequately resourced and kept up to date with changing standards, technologies and processes. Ensure an appropriate talent pipeline for these niche skilled resources
- Build and deliver a fit for purpose RedTeam capability and drive towards a purpleteam excercises without losing oversight and governance.
- Drive industry best practice research to continuously improve Group CyberSecurity redteam, pentesting and CS Assurance capabilities.
Qualifications & Experience
Qualifications
Degree or Honours (12+3 or equivalent) in Degree in a IT related specialism
Experience
10+ Years of hands-on experience in CyberSecurity and application security including experience in technology and security leadership experience of which at least five years should be at a senior level in CyberSecurity specifically in assurance, pentesting or redteaming functions, within an operational multinational environment.
Relevant experience in building a security & privacy by design capability within agile delivery teams.
Hands-on experience in a global complex environment is preferred Redteam lead experience or penetration testing experience is preferred
Knowledge/skills
Knowledge/understanding of the following:
- Software Engineering and Software Development Lifecycle
- Agile Ways of working / process flows
- IT Measures and Metrics (KPIs)
- IT Quality Management
- Security Incident Response
- Regulatory CyberSecurity & privacy compliance
- DevSecOps experience is a plus
- Redteam – Blueteam
- Penetration testing
Leadership Role: Yes
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
Join a Whatsapp Group of your choice, to be notified of the Latest Jobs in the Middle East:
https://www.dubai-forever.com/whatsapp-jobs.html
🇦🇪 🇸🇦 🇶🇦 🇴🇲 🇧🇭 🇰🇼 🇦🇪 🇸🇦 🇶🇦 🇴🇲 🇧🇭 🇰🇼 🇦🇪 🇸🇦 🇶🇦 🇴🇲 🇧🇭 🇰🇼 🇦🇪 🇸🇦 🇶🇦 🇴🇲 🇧🇭 🇰🇼
Create a new CV to apply for jobs in the Middle East (GCC):
1. Applicant Tracking System (ATS) - compliant CV. This CV is used for online applications on job sites. ATS is the software that reads and stores your CV in a database.
2. Visual/ Infographic CV. This CV is normally sent to recruiters by email. It is visually - appealing. It may not be compliant to the ATS.
To know more about ATS and Infographic CV read here:
https://www.dubai-forever.com/cv-writing-services.html#ATS-Compliant-CV
Please do submit your CV here as well:
🔊 https://www.dubai-forever.com/submit-your-cv.html
Join the Fastest Growing Jobs Group on LinkedIn:
🔊 https://www.linkedin.com/groups/8288711/
View our Youtube Channel:
🔊 https://www.youtube.com/channel/UC3f1M0lYhy7e6TT_nWq9HSQ
Join our Telegram Group:
🔊 https://t.me/gccjobvacancies
No comments:
Post a Comment