Key responsibilities

• Work closely with Information Security head on analysing and identifying various information security related risks and vulnerabilities
• Propose, design and implement relevant security changes, where feasible
• Analyse regulatory security requirements across GCC where required
• Play a core role in the design and acceptance of new infrastructure and platform initiatives from security perspective
• Perform regular internal and external vulnerability scans as per the corporate policies and procedures, and advise DevOps Team about priorities
• Organise regular internal and external penetration tests as per the corporate policies and procedures
• Support Technology teams in various internal and external security audits with focus on automated / regular infrastructure audits (IAC security) — Cloud services / Terraform / k8s etc
• Lead, in close collaboration with other Technology team, the remediation of audits, scans and pen-tests findings
• Coordinate the installation, configuration, and maintenance of mission-critical security applications such as AV, SIEM, DLP, FIM with DevOps and others related
• Champion information security topics and concepts amongst the Technology team while acting as an ambassador for the InfoSec team
• Help with source code security reviews for various development languages