Job Description

Designation:

• Project Manager - Information Security




Minimum Qualifications & Skills:


• An Engineering Degree, with 6+ Years experience in Information Security / Data Protection Project Management in BFSI.
• Hands on experience in leading information security/ cyber security projects.
• Proficient in application/ technology architectural security design principles, cyber threat assessments, software development life cycle, firewalls, data protection/ security, vulnerability scanning, application security, etc.
• Demonstrated expertise in the management of technology and application risks and controls
• Proficient in application/ technology architectural design principles, cyber threat assessments, software development life cycle, firewalls, data protection/ security, vulnerability scanning, application security, etc.
• Demonstrated expertise in the management of technology and application risks and controls
• Expertise in Information Security & Data Protection standards (like ISO 27001, PCI DSS, UAE IAS, SWIFT CSP, GDPR, UAE Data Protection, etc.).
• Strong knowledge of information Security, Data Protection and Banking / IT Systems.
• Ability to facilitate both technical and business discussions.
• Strong analytical mindset that allows you to deeply understand topics
• Excellent verbal and written communication skills combined with a knack for clear articulation
• Knowledge of Microsoft Office, MS project, MS Share Point, JIRA, Asana or other project management tools
• Certificates such as CISA, CISM, CISSP, Prince 2, PMP RMP, Agile PM, PMI-ACP, etc.




Job Responsibilities:

• Day-to-day management of information security projects requirements (agile and waterfall) for implementation of business applications and technology systems and including time, scope, budget, etc.
• Manage the internal relationship with Information Technology (IT) and PMO process owners supporting the service, assisting with the definition and requirements of Information Security requirements in line with Bank's Information Security Policy.
• Identification and proactive management of projects risks and issues
• Supporting the EPMO / IT Project Managers to manage the backlog/requirement gathering and guide the team in balancing the priorities and scope
• Ensure the implementation of business applications and technology solutions adhere to bank's information security policy and regulatory standards by cultivating a strong risk and control environment.
• Drive transparent, quantifiable, and long-lasting control improvements by working together with the internal information security team and other project implementation team like EPMO, IT, Business teams, etc.
• Provide clear direction to business, product, and technology stakeholders so they can manage their risks effectively.
• Contribute to the creation of a culture of risk and control that is centered on proactive awareness of and enhancement of the control environments.
• Work with the Contracts, Vendor Management and Compliance/Business departments to ensure that third-party suppliers contracts and operating-level agreements meet information security requirements.
• Lead and oversee budget, staffing, and contracting
• Work with and manage external vendors / auditors during assessments.