Senior Manager, Offensive Cyber Security

Industry Information Technology and Analytics Consulting

Job Summary

The incumbent will have the responsibility to assess the Information Technology applications and infrastructure in the Group for any gaps from IT Security Policies and Standards. The incumbent will be responsible for undertaking vulnerability scanning of IT assets, for participating in the QNB Red Team that conducts simulated offensive attack exercises and for managing the relationships with penetration testing vendors. This highly technical role must have an ethical hacking skillset and background.

Job Summary

The incumbent will have the responsibility to assess the Information Technology applications and infrastructure in the Group for any gaps from IT Security Policies and Standards. The incumbent will be responsible for undertaking vulnerability scanning of IT assets, for participating in the QNB Red Team that conducts simulated offensive attack exercises and for managing the relationships with penetration testing vendors. This highly technical role must have an ethical hacking skillset and background.

• Ability to adhere to divisional Key Performance Indicators (KPI’s) for performance monitoring and quality measurement purposes.
• Implements KPI’s and best practices for Offensive Cyber Security.
• Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank.
• Act within the limits of the powers delegated to the incumbent.

• Ability to perform security assessments of QNB systems. Assessing the effectiveness of the systems, the security architecture design, compliance to IT security policies and relevant standards.
• Ability to develop close relationships with IT and business teams. Understand and manage their requirements for GIS risk services.
• Ability to provide Ad-hoc consultancy for risks of new technologies and propose with potential solutions.
• Ability to identify opportunities and develop new ideas that will lead to improvements.
• Ability to adapt/change behavior or plans to better achieve the target/objective.
• Ability to analyze a complex problem and identify potential solutions by exploring and analyzing diverse alternatives, including, where applicable, risks and potential business impact. Ability to make the right decisions based on the necessary information and to take measures accordingly.
• Ability to liaise with external consultants appointed from time to time to assess the adequacy and effectiveness of the Group’s information security efforts.
• To assist customers in all their queries on Bank’s product and seek solution to their requests.
• Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time.
• Build and maintain strong/effective relationships with related departments/units to achieve the Group’s objectives.
• Provide timely/accurate data to external/internal Auditors, Compliance, Financial Control and Risk when required.

• Ability to set high targets/objectives for self and department. Prefers to take the initiative than to stay passive if events happen. Committed to improving productivity. Unwilling to accept average performance. Tries to be above the requested performance.
• Ability to identify own strengths and limitations. Seeks guidance and advice when appropriate to accomplish tasks and perform the role in an effective and efficient way.
• Ability to play a constructive role as member of the team.
• Ability to assess the effectiveness of the various information security systems and network…