Summary
Crescent Petroleum is hiring a Security Analyst in Sharjah. The role covers information security governance, ISO 27001 alignment, risk and gap assessments, security policies, data governance, and security awareness training. The analyst will also support internal and external audits, maintain risk and documentation records, and improve deployed security technologies. A bachelor’s degree in a relevant field, CISSP, CISA and/or CEH certification, and knowledge of networking, cloud security, NIST controls, and vulnerability testing are required.
The posting
As published on crescentpetroleum.com. Pulled from the employer's site and shown as they wrote it.
Essential Functions:
- Monitor and Maintain ISO27001 adherance.
- Conduct risk and gap assessments to identify gaps in existing security governance
- Develop, maintain, and review information security policies, standards, procedures, and guidelines aligned with business objectives and regulatory requirements.
- Maintaining and improving the security technologies deployed, including creating use cases, customizing or better configuring the tools based on past and current threats.
- Develop and maintain data governance and data security
- Develop and conduct security awareness training programs
- Coordinate internal and external audits, including evidence collection, walkthroughs, and remediation tracking.
- Act as a liaison between security, IT, business units, and auditors to ensure consistent understanding of security and compliance requirements. Maintain documentation repositories for policies, procedures, risk assessments, and audit artifacts.
- Maintain the information security risk register and ensure risks are appropriately documented, prioritized, and tracked.
Required minimum qualification & experience:
- Bachelor’s degree in computer science, Information Technology, or Cybersecurity.
- Certifications required: CISSP, CISA and/or CEH.
Minimum Professional Experience Required:
- Technical knowledge of networking concepts and network infrastructure.
- Working knowledge of cloud security and data governance (e.g., Azure). Solid understanding of network and computer security, software security Strong analytical, documentation, and communication skills.
- Knowledge of ISO27001, NIST controls and implementation.
- Familiar with penetration and vulnerability testing. Familiar with antivirus, Firewall, IDS/IPS protocols.