About the Role

The Information security job involves assessing the effectiveness of Information Security policies and pointing out vulnerabilities or lack of controls to mitigate a given risk and co-manage Business Continuity Plans. The security analyst will work with every department in the company to make recommendations for improvements and craft detailed design documents for them to implement. This job involves project management and It will also involve Information Security Administrator responsibilities.

• Ensure the widespread support of and compliance with information security requirements.

• Administration and management of IT security Solutions (Hardware, Software) such as Servers, Firewalls, Network Devices, IPS, operating systems, Security Applications, Scanners.

• Perform various tests and penetration testing on systems and Zain's network ( LAN/WAN, and telecommunications) to capture vulnerabilities and to suggests corrective actions, so that those systems and networks is not interrupted..   

• Make sure that all business applications include adequate security control measures.

• Be an in-house expert who assists with the improvement of security on information systems.                                         

• Execute detailed Information Security audit procedures.                  

• To test, maintain, and follow up on all the information security systems and its alarms and incidents for a better availability.                                                                    

• Acts as a technical consultant on information security incident investigations, forensic technical analyses, and possibility of data recovery.

• Implement Security Awareness Sessions for Zain employees.

• Analyze logs kept by computer and network access control systems to detect attempts at unauthorized use, and notifies the Information Security Team Leader as necessary.

• Provide business and technical advice and recommendations on a wide variety of information security issues, concerns, and problems

• Audit access control requests to make sure that only proper access is given to the proper individual as per the business needs.

• Audit newly installed equipment that are added to the network to make user that they comply with security requirements. Also to make sure that such new installation does not effect the live network.

• To be involved (co-manage) in the implementation of  the ISO 27001, PCI and similar compliance audits and certifications.

• Lead Internal/External penetration tests and risk assessment exercises.

• Be aware of, and adhere to, all environmental requirements as set by the statutory bodies in Kuwait, or by the published policies of Zain Group/Kuwait.

• Apart from his/her job responsibilities, The Information Security Analyst will also perform the responsibilities of the IS Administrator when necessary.

To perform all the above-mentioned roles and responsibilities in compliance to the Information Security Management System (ISMS) policies, and to report any information/physical security breaches or incidents to Data Control Department immediately. Also to ensure that all team members are following mentioned policies.

What We Need From You

• Security ownership (Treat security issues as their responsibility not someone else’s)

• Risk-based thinking (Understanding severity of security issues, knows how to document risk)

• Clear and calm communication (Able to explain security issues to non-technical people, stay composed during incidents)

• Continuous learning and curiosity (Actively keep up with latest threats and trends, able to think in place of bad actors)

• Integrity (handles sensitive access and data ethically, escalates security issues instead of hiding them)

Bachelor’s Degree

Computer Science, Computer Engineering, Cybersecurity, MIS or any security relevant major