Abu Dhabi Islamic Bank Looking for Senior Business Information Security Officer at Abu Dhabi Full Time

JOB DESCRIPTION
Role : Senior Business Information Security Officer
Location :Abu Dhabi

Role Purpose:
This role is essential for driving Business Information Security Management, IS Awareness & Training, IS Services and BISO program to successfully implement, maintain, support, and improve IS Services delivery in ADIB. Additionally, this role will support Head of Business Information Security Management in managing the relationships between Information Security Department and Executive Management stakeholders, other business functions, department, International Branches and ADIB subsidiaries.
The assigned to this role will be working closely with Head of Business Information Security Management to assist in the delivery of information security services, awareness & training, and other associated tasks aligned with ADIB’s information security strategy, policies, and technology requirements. This includes security awareness program coordination, event management, engaging the team building activities and coordinating with Business Information Security Officers under BISO program across ADIB Group.
Key Accountabilities of the role

• Assist Head of Business Information Security Management in the delivery of information security services, awareness & training, and other associated tasks aligned with ADIB’s information security strategy, policies, and technology requirements.
• Able to conduct information security & cybersecurity risk assessment to support enhance and refine information security policies and controls to better enable business without compromising information security.
• Experience in proposing, applying counter measures and other secure channels to address data leakage and develop technical solutions to enable the business requirements for secure data sharing and collaboration.
• Experience in Cloud security and SaaS (Solution as a Service) controls review to be able to enable business with the right security controls.
• Support In assessing data protection exception requests and recommend appropriate actions as required.
• Support Head of Business Information Security Management in creating and maintaining Internal Incident communication plan and aeCert, execute and escalate data breach response whenever required.
• Support Head of Business Information Security Management in managing the relationships between Information Security Department and executive management stakeholders, other business functions, department, International Branches and ADIB subsidiaries.
• Ensure information security standards and requirements are met through conducting quality assurance tests.
• Responsible of handling Information Security Services, BISO Program to successfully implement, maintain, support, and improve IS Services in ADIB.
• Responsible for collaboration activities within Information Security Department and with other business units in the bank
• Acts as the liaison between the team, leadership, and other key stakeholders
• Support in handling BISOs network and program across the bank.
• Support the management of KRI’s / KPI’s to ensure that service delivery and meet performance and business objectives
• Work with Information Security Department senior management and leadership team to scope and prioritize information security services and awareness initiatives aligned with ADIB’s goals and objectives.
• Responsible for the administration and organization of tasks associated with information security services projects, ranging from simple activities to more complex plans.
• Identify service and process gaps and incorporate a continual Information Security Services cultural improvement.
• Support change management activities for Information Security Service delivery changes.
• Work with the team to support and deliver Information security events and activities, including security awareness programs, campaigns, team building activities as Information and Cybersecurity SME (Subject Matter Expert).
• Coordinate with HR, Marketing, Communication, and other business departments in planning, organizing, and enhancing security awareness and capability building activities.
• Liaise with related information security project stakeholders to identify and define project requirements, scope, and objectives.
• Responsible for managing Information Security SLAs and OLAs.
• Work closely with information security program/projects stakeholders and managers to prepare comprehensive action plans, including resources, time frames and budgets for projects.
• Coordinate the establishment and management of InformationSecurity Department Portal.
• Assist in the preparation of service budgets & track risks with associated mitigation plans and analyse programmatic opportunities driving successful outcomes.
• Act as the point of contact and communicate services status to internal participants and external stakeholders

Specialist Skills / Technical Knowledge Required for this role:

• The ability to conduct IS risk assessment, information security & cybersecurity risk assessment to support, enhance and refine information security policies and controls to better enable business without compromising information security.
• Excellent skills on problem solving, technical troubleshooting related to IS policies and controls.
• Experience in Cloud and SaaS security, and related Information and cybersecurity controls assessment.
• The ability to translate highly technical cybersecurity concepts into business language.
• Excellent customer service and interpersonal skills with a positive attitude.
• Communication Skills to build business/professional relationship.
• Capability to engage with internal/external stakeholders to present Information Security in a positive manner. Excellent English skills to effectively communicate and convey departmental messages. Arabic is a must.
• Good orator and presenter with ability to present security awareness messages.
• Essential project management knowledge.
• Ability to prepare and interpret presentations, flowcharts, schedules, and step-by-step action plans.
• Exposure to different collaboration tools and methods and best practices.
• Ability to learn new concepts, technology, and techniques.
• Positive and professional attitude, team player, flexible and adaptable, open to change.
• Minimum bachelor’s degree in business, information technology or computer science related.
• Security+ and/or CISSP is a surplus

Previous experience:

• 10 – 15 years experience in information and cyber security services delivery and management.
• Proven track record in successful coordination of tasks and projects in Technology or Security
• The ability to conduct IS risk assessment, information security & cybersecurity risk assessment to support enhance and refine information security policies and controls to better enable business without compromising information security.
• Excellent skills on problem solving, technical troubleshooting related to IS policies and controls.
• Experience in Cloud and SaaS security, and related Information and cybersecurity controls assessment.
• Minimum 6 Years Proven experience in Customer Service and Relationship Management in a challenging business environment.
• Proven experience in managing meetings, schedules, calendars, reports, administration etc.
• Preferred experience in Islamic banking or financial institutions.