Assistant Manager Information Security

Muscat, Sultanate of Oman | Posted on 14/01/2026

To support the Information Security Office (ISO) in the implementation and oversight of the Bank’s Governance, Risk, and Compliance (GRC) activities, while assisting in security monitoring and operational tasks related to cybersecurity. The role ensures ongoing alignment with regulatory frameworks, international standards (e.g., ISO 27001, PCI DSS), and the Bank’s internal security policies and procedures.

• Monitor of the Information Security Framework in accordance with ISO 27001 and other relevant standards.
• Conduct third-party and cloud vendor risk assessments and ensure controls are properly applied.
• Assist in preparing and submitting MIS reports and key risk indicators (KRIs) related to Information Security.
• Coordinate with internal stakeholders to ensure all change requests are reviewed in accordance with Information Security guidelines.
• Maintain and update records of information security-related policies, procedures, and documentation.

• Oversee access control lists and ensure proper user permissions are in place.
• Ensure Business Continuity (BCM) tools and Information Security solutions are functional at the Disaster Recovery (DR) site.
• Review contracts, annual maintenance agreements, and renewal schedules for security tools and systems.
• Support the audit process by coordinating responses and action plans for Information Security-related findings.
• Participate in security incident investigations and assist in root cause analysis and response documentation.

• Organize Information Security awareness programs across the Bank.
• Provide training materials and knowledge-sharing sessions to staff to build security awareness.

• Ensure timely submission of deliverables for audit and regulatory compliance.
• Support periodic internal reviews and contribute to the improvement of SOPs.
• Track implementation status of remediation plans for identified vulnerabilities and audit observations.

• Perform additional duties as assigned by the Head of Information Security or Risk Management.
• Maintain version control for Information Security documentation and ensure alignment with approved procedures.

• Omani nationals only
• Bachelor’sdegree in Computer Science, Information Security, or a related field.
• Minimum 5 years of experience in Information Security implementation, governance, or operations.