Specialist, Systems Security

Job Title Specialist, Systems Security Vacancies1

Location Dammam, Dammam, Saudi Arabia Job Type Full Time On-site

Apply Now Share on:# Company Description Arabian Machinery & Heavy Equipment Company (AMHEC) is working in the field of Crane Rental, Heavy Lifting, Transportation, and Heavy Equipment Rental Services since 2008. An impressive beginning in the field of facility management has also started since 2017 in major rig sites in Kingdom in Saudi Arabia for well-known ARAMCO contractors.

We have a fleet of more than 200 medium and large sized Heavy Duty Hydraulic Cranes with capacity ranging from 50 tons to 500 tons. Transportation fleet con Read more

Skills

English Fluency Excel/WORD/Computer skills

Communications Skills# Description The main purpose of the of the Specialist, Systems Security is to develop and implement enterprise security and compliance policy and monitor its adoption by IT Department including architectures and security solutions, frameworks, and roadmaps as well as the physical and electronic protection of data by determining security requirements, planning, implementing, and testing security controls, adopting security standards, policies, and procedures.

This position works closely with both the CSSO and IT Manager.

Duties and Responsibilities:

Lead role in defining the appropriate architecture, technical requirements, and standards necessary to address information security needs for the organization. Responsible for the development and evolution of an in-depth information security strategy for AMHEC's. Support IT Manager in the improvement of the IT management processes and policies and building the enterprise architecture for the information technology services for AMHEC's. Conduct design and engineering processes to ensure that security architecture solutions maintain the confidentiality, integrity, and availability of information assets.

Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems. Develop and maintain a portfolio of enterprise security standards for applications, systems, and data. Determine security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments;

studying architecture/platform; identifying integration issues; and preparing cost estimates. Work with internal and external technical teams to define and document controls necessary to ensure the confidentiality, integrity, and availability of computer systems, data, and network resources. Evaluate security controls employed by external service providers to ensure information assets are adequately protected, and couple them with additional security controls including firewalls, intrusion prevention systems, and monitoring/event correlation solutions.

Address security requirements within cloud architectures, creating new and evolving security services and standards pertaining to cloud services, consulting with internal and external stakeholders, and developing and documenting strategies, standards, and roadmaps for cloud security components and architectures. Lead the development and implementation of security technology solutions for complex environments and architecture including cross-platform interoperability. Participate in the risk assessments of new and existing technology solutions to identify opportunities for improvement, and engineering solutions to adequately mitigate associated risks.

Oversee and review the ongoing documentation, development, implementation, and maintenance of processes, procedures, and services associated with architecture functions including ensuring that requirements and deliverables are clearly defined. Conduct research, monitor new product developments, and make recommendations regarding technologies that have the potential to benefit the security of information assets. Develop and implement an Information Security Incident Response Plan and support the security incidents response team.

Develop and maintain an Information Security Policy and monitor the adherence of that policy with all stakeholders. Assist with maintaining a company-wide Information Security awareness training and education program that includes processes, tools, policies, and technologies that help reduce risk to the city's information assets. Drafts and develops AMHEC's Control Requirements Manual (CRM) policies and procedures and monitor IT Department implementation of the same.

Serves as a liaison to the company's security office for local and network security issues. Ensures proper computer and network access for system users; assigns passwords and user IDs to new users. Collaborates with users to discuss computer data access needs, to identify security threats and violations, and to identify and recommend needed…