Assistant Manager - Cyber Security

Cyber Security
 Ensure that information security initiatives undertaken by GCAA are aligned to its overall business and IT objectives and federal government requirements.
 Develop plans to support information security activities on an on-going basis in GCAA IT.
 Define, establish and promote information security culture in GCAA
 Create, implement, maintain and review information security strategies, plans, policies, procedures etc. to ensure adequate information security assurance within GCAA and meet all regulatory requirements.
 Establish and manage the organization wide security incident management framework to ensure coordinated and effective response to all kinds of security incidents.
 Plan and implement programs on information security awareness & training for employees and vendors of GCAA in coordination with concerned business units.

ISO Compliance
 Coordinate information security efforts of different ISMS roles that have one or more information security related responsibilities.
 Act as a liaison and coordinate with all departments in GCAA to ensure consistent Information Security Management System.

Security Risk Management
 Create, maintain and update the asset register of IT department.
 Create, maintain, implement & review ISMS Risk Management Methodology of GCAA
 Conduct periodic risk assessments and prepare risk treatment plans to mitigate identified security risks.

Cyber Security Project Management

Manage IT Security projects to ensure all project objectives (cost budget, timelines, scope and quality), are accomplished in a timely and cost effective manner.
 Guide the Project Managers in the security planning, organising, management and security control of various IT projects in order to ensure that the project cycle is completed, as per project management standards and objectives.

Change Management
 Effectively manage, recommend and authorize development of requested changes, upgrades or enhancements onto existing systems and applications in due consultation with different stakeholders to ensure GCAA’s IT Applications/services are current and user friendly.

Security Policies, Systems, SLA, Processes & Procedures
 Recommend improvements to IT Security policies and implementation of procedures and controls covering all areas of the assigned IT unit’s activity so that all relevant procedural/legislative requirements are fulfilled while delivering a quality, cost-effective service to customers.
 Liaise with IT Planning section for reviewing IT policies, procedures, work instructions and checklists as required for the ISMS framework.
 Monitor the security systems and ensure adherence to established SLA.

Audits, Assessments & Reviews
 Follow up the internal/external IT security assessments plan and review audit reports.
 Review reports for adequate security controls, efficiency, and compliance with policies, regulations. Make recommendations when necessary.
 Ensure follow up on actions plans of the findings that have emerged from security assessments/reviews/audits.

Leadership
 Manage the effective achievement of the assigned unit’s objectives through the leadership of the IT department – setting individual objectives, managing performance, developing and motivating staff, providing formal and informal feedback and appraisal.
 Enhance core efficiencies and competencies, and leverage technologies to maximise performance and widen the scope of the IT services.
 Responsible for recruitment of qualified staff and managing performance as per management direction.

Bachelor’s degree in IT or Information Systems, MIS related discipline with 5 - 7 years of experience in a relevant environment.
 Must possess Certificate on implementation of ISMS – ISO 27001standards