Job Purpose :
To develop, manage, and execute cyber security project across Mashreq to –
Lead and oversee the strategic operations of the Cyber Defense Center (CDC) to ensure effective monitoring, detection, analysis, and response to advanced cybersecurity threats.
Develop and implement security strategies, policies, and procedures to manage and mitigate risks across the organization.
Guide and mentor the team in using SIEM platforms (Azure Sentinel & ArcSight preferred) and other security solutions to address complex and critical security events.
Coordinate with senior leadership and external stakeholders to enhance the organization's security posture and ensure compliance with regulatory requirements.
Key result areas :
Strategic Security Management :
Develop and implement strategies for monitoring and responding to security events from SIEM systems (Azure Sentinel & ArcSight preferred).
Analyze and respond to security events from diverse data sources such as firewalls, IDS / IPS, antivirus solutions, DAM systems, web servers, proxies, and banking applications.
Advanced Threat and Incident Management :
Create and refine alert rules and logic in SIEM to detect significant events and threats.
Perform precise, real-time analysis and correlation of logs / alerts from multiple sources.
Utilize established policies, standards, and procedures to classify security alerts as incidents and guide incident response efforts.
Leadership and Improvement :
Improve incident response times and reduce false positives by refining detection capabilities and processes.
Assist in the design, implementation, and execution of security awareness programs and risk-based security controls analysis.
Update and enhance processes and policies (SOPs, playbooks, runbooks) with a deep understanding of cybersecurity best practices.
Cross-Functional Collaboration :
Collaborate with compliance, audit, and regulatory teams to provide necessary information, data, and evidence.
Keep up-to-date with industry knowledge and trends to maintain a high level of security proficiency.
Key Principles :
Strategic Leadership :
Provide strategic direction and leadership to the Cyber Defense Center, ensuring alignment with organizational goals and cybersecurity best practices.
Enhanced Threat Detection and Response :
Drive improvements in threat detection and response capabilities, ensuring accurate identification and swift remediation of security incidents.
Continuous Process Improvement :
Continuously evaluate and enhance security processes and policies to adapt to evolving threats and improve operational efficiency.
Effective Communication and Collaboration :
Maintain strong communication with internal teams, senior management, and external stakeholders to ensure effective security management and compliance.
Ethical and Professional Standards :
Uphold high ethical standards in all security practices, ensuring compliance with regulations and protecting sensitive information.
Knowledge , Skills and experience :
Educational Background :
Graduate / Postgraduate degree in Science, Engineering, or IT.
Certifications :
Minimum of 2 professional certifications from CISSP, CISM, CRISC, CISA, or equivalent.
Experience :
Extensive experience in SIEM design and implementation, with a strong background in Cyber Defense Center or Security Operations Center roles.
Over 12 years of experience in SOC & CDC, with proven leadership skills and expertise in managing complex security operations.
Skills :
Proficiency in managing SIEM policies and enhancing security operations.
Strong analytical skills for evaluating security requirements and implementing appropriate controls.
Excellent documentation and report writing skills.
Knowledge of the banking environment is advantageous.
Cyber Defense Center • Delhi, India