The Cybersecurity Expert is responsible for safeguarding the organizations information systems networks and data against cyber threats. This role involves designing implementing and monitoring security measures ensuring compliance with industry standards and regulations and responding effectively to incidents. The Cybersecurity Expert should enhance and build a secure digital environment that supports the organizations operations and strategic goals.
Key Responsibilities:
Security Strategy & Governance:
o Implement and maintain cybersecurity policies procedures and standards in compliance with local standards.
o Conduct risk assessments and develop mitigation strategies.
o Ensure compliance with international security frameworks (ISO 27001 NIST CIS etc.) and local regulatory requirements.
o Provide Infrastructure security assessment Strategy.
o Response to Internal and External Auditors.
Infrastructure & Network Security:
o Design and implement secure network architectures firewalls VPNs IDS/IPS and endpoint protection.
o Monitor systems for vulnerabilities anomalies and unauthorized access
o Follow up with concerned teams for vulnerabilities and misconfiguration mitigation.
o Coordinate patch management and system hardening activities.
Threat Management & Incident Response:
o Monitor analyze and respond to security events from SIEM SOC and threat intelligence sources.
o Should Lead incident response activities.
o Conduct post-incident reviews and develop preventive measures.
Identity & Access Management (IAM):
o Manage authentication authorization and access controls.
o Implement Zero Trust and least-privilege principles.
Security Awareness & Training:
o Conduct cybersecurity awareness programs for employees.
o Provide technical guidance to IT teams.
Emerging Technologies & Research:
o Stay updated on evolving cyber threats attack vectors and security tools.
o Recommend and evaluate new security technologies and solutions (e.g. AI-driven security cloud security).
Knowledge Transfer
o Technical expertise with the critical function of mentoring training and developing internal capabilities.
Requirements
Qualifications & Skills:
Masters degree in Computer Science Information Security or related field.
Relevant certifications such as CISSP CISM CEH CompTIA CySA or GIAC.
Proven experience in cybersecurity roles (minimum 15 years).
Strong knowledge of network protocols firewalls IDS/IPS SIEM vulnerability management and incident response.
Experience with cloud platforms (AWS Azure GCP) security controls.
Analytical problem-solving and communication skills.
Ability to work under pressure and respond quickly to security incidents.
Preferred Attributes
Experience in Security Operations Centers (SOC).
Knowledge of regulatory frameworks (ISO 27001).
Hands-on experience with penetration testing and ethical hacking.
Strong collaboration skills to work with cross-functional teams.