Manager, Cybersecurity Operations

1. JOB DETAILS:

Position Title:

Manager:
Cyber Security Operations

Broad Band: M12:
Management

Reports to:

Director:
Cyber Security

Department & Function:
Ma’aden Cyber Security

Talent Pipeline Layer:
Managing Others (MO)

Manager:
Cyber Security Operations is responsible for performing the daily monitoring, maintenance and improvements to the security solutions deployed across Ma’aden on the perimeter, infrastructure, network-level, system-level and database-level to monitor and protect MA’ADEN Corporate and Affiliates IT (Information Technology) and OT (Operational Technology) resources and assets within Saudi Arabia, India, Malawi, Zimbabwe, Mozambique, South Africa and Mauritius. This position works closely with other functions to assist in the security monitoring program, managing the Security Operations Center (SOC) for Ma'aden within the seven countries, maintaining cyber threat situational awareness of internal and external threats and vulnerabilities through enhanced monitoring capabilities and oversight of systems and processes used to assess security.

Handle threat intelligence through strong partnerships and communications with regulatory agencies, Cybersecurity providers, national and global peers. This position is also responsible for catering to all access management requests and changes as well as the incident response against in Cyber attack / breach and recovery capability. It is also responsible for handling forensic investigations and Root Cause Analysis (RCA) activities.

• Bachelor degree in Computer Science or Computer Engineering with an advanced degree desirable
• At least 8-10 Years' relevant experience
• Skills:
  • Mixed managerial, analytical and technical skills, and knowledge in all aspects of Cyber security in multi IT / OT domains: database, development, network operations, Data Centers, operating systems, Security Operations Centers (SOC), security technologies, specific applications security, etc.
  • Good knowledge in business continuity planning and disaster recovery management
  • Good understanding of cyber security standards (ISO
    27001, ISO 22301, ISO 9001, NIST)
  • Certifications in information security field (e.g. CISM / CISSP / ISO 27001 / ISMS Lead Auditor)
  • Good understanding of IT service management practices
  • Certifications in ITIL is a plus

• Cyber Security Operations Management
  • Oversee and direct Cyber security activities to execute the Cyber security program at all MAADEN including Corporate and Affiliates within Saudi Arabia, India, Malawi, Zimbabwe, Mozambique, South Africa and Mauritius
  • Ensure that the rules of use for IT/OT systems and the administrative procedures for IT/OT systems comply with the MA’ADEN’s Cyber security policies
  • Ensure that services provided by business and other enterprises, including outsourced providers are consistent with established Cyber security policies
  • Perform daily monitoring, maintenance and improvements as needed to the security solutions deployed across Ma’aden on the perimeter, infrastructure, network-level, system-level and database-level
  • Maintain cyber threat situational awareness of internal and external threats and vulnerabilities through enhanced monitoring capabilities and oversight of systems and processes used to assess security
  • Monitor users, applications, networks, systems, and access to physical assets
  • Perform periodic review of audits logs (includes review and retention) of applications, networks, systems, and access to physical assets
  • Perform periodic user access review across Ma’aden’s registered users
  • Conduct physical and logical security control assessments (vulnerability assessment), security monitoring, detection, and security status reporting to enable informed decisions
  • Scans, analyzes, and apply countermeasures of vulnerabilities
  • Detects, analyzes, and eliminates viruses and malicious code
• Incident Response Management
  • Establish and manage capability to respond to and recover from disruptive and destructive Cyber systems incidnets
  • Design and implement processes for detecting, identifying and analyzing security related events
  • Develop incident handling recovery…