Role purpose:
This role is part of the internal IT team at VOIS in Egypt. The person is a technical expert ensuring the implementation and monitoring of Information Security Systems & policies.
The Cyber Security Tech Lead is responsible for the IT setup that ensures that the risk to the organization’s information posed by a variety of cyber threats (cyber attacks; theft or corruption from within; etc.) is minimized & ensures that when cyber attacks occur or data are stolen or compromised, these incidents are dealt with promptly and effectively and the chance of that particular type of incident recurring is minimized with a proactive security measures.
This role is responsible for Planning, designing, implementing & maintaining The latest IT security systems to ensure a steady & safeguarded VOIS IT environment.
The role will monitor and report operational risks and will implement concrete measures to mitigate them. In case of an Information Security breach or business outage, the role will initiate immediate steps to resolve the issue and will lead the way to the root cause analysis.
Key accountabilities and decision ownership
- Design, Implement and use of security systems (e.g., firewalls, Proxies, data encryption) to protect sensitive information.
- Maintain the highest cyber systems availability for systems on hand as per agreement with management and keep records of down time.
- Review technical solution designs for compliance with VOIS wide Information Security policies
- Consult IT delivery projects in Cyber Security topics
- Follow-up and resolve open issues identified through internal and external Information Security audits
Core competencies, knowledge and experience
- Practical experience of designing, implementing and operating security controls in a complex IT and Network environment
- Experience in Single Sign-On (SSO) identity management systems using PKI (Public Key Infrastructure) and Certification Authorities (CA), Firewalled demilitarized zones off network routers, Protocol encryption including SSL (Secure Sockets Layer) and the WPA (Wifi Protected Access) family, Virtual Private Network (VPN) layers and connections between sites and system
- Strong awareness of standards and certificates such as: CISSP, ISO27001, CCNA Security, Risk Management (e.g. ISO 31000). Knowledge of regulatory requirements
- Strong knowledge of IT service management processes (e.g. ITIL)
- Extensive operational experience in running an globally distributed IT service organisation
Must have technical / professional qualifications:
- 4+ years of experience in IT Technology Security domain