---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Technology Risk Consultant
Location: Riyadh, , Saudi Arabia
Type: Permanent P/T
Closing Date: 2007-05-17
Role Objective:
Member of the IT Risk section within the Systems Security Department.
Responsible for performing regular risk assessments, developing risk mitigation
strategies as per the Information Risk Management (IRM) framework of the
section. Will assist the section head in activities pertaining to risk
management, policy and standards development and maintenance
Responsibilities & Duties:
• Assists the Section Head in performing his duties and responsibilities.
• Participates in internal team meetings, and reviews the regular risk
assessment requests including ad-hoc risk assessment requests with members of
the committee to approve/disapprove these requests.
• Performs the approved ad-hoc risk assessment requests.
• Develops and updates the Threats and Vulnerabilities databases and the
controls database.
• Plans and prepares for risk assessments.
• Identifies the owners and key users of the area or process under review
and provides input to the Section Head for overall planning.
• Identifies common and specific threats and vulnerabilities of the
systems and databases under review.
• Performs detailed threat and vulnerability impact assessment, assigns
impact ratings and makes adjustments in the overall risk ratings for the
systems and databases being assessed.
• Identifies risk mitigation options available, evaluates and analyzes
feasibility, effectiveness, efficiency and cost of risk mitigation
options/controls and proposes the most appropriate controls for the systems and
databases being assessed.
• Identifies the impact of the new threats and vulnerabilities on various
assets.
• Provides risk assessment reports.
• Maintains defined policies and standards, updates them and defines new
policies as and when required.
• Keeps a tab on new technologies and risk areas within them
• Project team member on projects assigned by the section head
• Functions as a point of escalation for Security Related incidents.
• Maintenance of all relevant IT Risk documentation.
• Participates in Project meetings with ITD and within SSD.
• Provide coordination with ITD as required
JOB REQUIREMENTS
---------------------------------------------------
Technical Skills:
• Good knowledge of Banking processes.
• Excellent knowledge of information security concepts, methodologies and
best/leading practices.
• Excellent analytical skills.
• Excellent risk analysis skills.
• Excellent technical writing skills.
• Good Knowledge on ethical hacking and penetration testing.
• Good knowledge on risk assessment tools.
Administrative Skills:
• Excellent coordination skills.
• Excellent time management skills.
• Excellent teaming skills
Management Skills:
• Good reporting skills.
• Excellent communications skills.
• Experience in working in a multi-vendor environment.
• Good interpersonal skills.
• Good presentation skills.
CONTACT
---------------------------------------------------
Ramdas Iyer,
Associate HR Consultant,
Indusface Consulting Pvt Ltd,
Ph: +91-265-6562666 / 6562888.
Mobile:+91 9924114960
A Reputed Bank
Ramdas Iyer
ramdas.iyer@indusfaceconsulting.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
