Information Security Specialist

About the job Information Security Specialist
Purpose of the Job
Operating the global security management system on the required scope of
activities and services to ensure effective handling of information security
risks in compliance with ISMS framework and group directions
Duties and Responsibilities
‎1. Supports with all ongoing activities related to corporate information
security within the organization while spreading information security
awareness and maintaining it at the corporate level.
‎2. Participate in the development and implementation of global security
policy, standards, guidelines, and procedures to ensure ongoing maintenance of
security, and its compliance with SOX Controls and ISO/IEC ‎27001 and the group
standards.
‎3. Participate in defining the security management system requirements (ISMS)
in accordance with the ISO ‎27001 requirements and group information security
standard in order to ensure that security objectives are being achieved.
‎4. Participates in applying Orange ISMS standards in alignment with the Group
standards.
‎5. Participate in performing ISMS gap analysis and developing the information
security forum priorities and roadmap, follow up on the implementation of the
plans.
‎6. Participates in developing the corporate information security dashboard
through measuring, monitoring, and reporting information security forum
metrics and plans to ensure that organizational objectives are achieved.
‎7. Participate in reporting the critical security incidents and take
recommended corrective actions to the Information Security Committee and The
Group.
‎8. Participate in periodic information security risk assessment for the
company critical systems and recommend the adequate controls as per the
Information security scope and limits.
‎9. Engage in the assessment of the information security risk assessments for
new/existing products and services that may impact any information security
aspect.
‎10. Identify and assess information security risk / exposure affecting the
business at the corporate level.
‎11. Ensure full implementation of global security policy, standards,
guidelines, and procedures to ensure ongoing maintenance of security and
reinforce standard security level whenever necessary.
‎12. Initiate, facilitate, promote, and maintain activities to create the
corporate information security awareness.
‎13. Maintain the archiving and record management policy and system.
Job Specifications
Education:
* Bachelor degree in Computer Science or IT.
* Certifications such as CISSP and/or CISA are highly preferred
Experience:
* Up to ‎2 years of experience in the risk assessment and security field.
* Experience in project management is a plus
* Good knowledge of information security technologies.
* Good knowledge of network exploitation, ethical hacking, penetration testing.
* Knowledge of database applications, spreadsheet design and report writing software.
Skills and abilities:
* Very good English both spoken and written.
* Very good computer working skills such as databases, operating systems and networks.
* Strong technical writing skills.
* Good communication skills.
* Team player