أخصائي أول في أمن المعلومات

Information Security Governance & Access Control

• Protect systems by defining and enforcing access privileges, control structures, and resource authorisation mechanisms.
• Create, maintain, and enforce the University’s information security documentation, including policies, standards, guidelines, and procedures.
• Ensure alignment with industry-standard security frameworks and best practices across all IT domains.

Risk Management, Vulnerability & Gap Analysis

• Identify security gaps and vulnerabilities in systems, networks, applications, and endpoints.
• Work closely with technical and business stakeholders to remediate identified risks.
• Recognise and investigate security issues by detecting abnormalities, reporting violations, and initiating corrective actions.
• Conduct periodic security audits to identify violations, inefficiencies, and compliance gaps.

Security Architecture & Controls Implementation

• Ensure industry-standard security practices are followed across network security, server security, application security, endpoint security, and forensic investigations.
• Implement and continuously enhance security controls to protect enterprise systems and data.
• Oversee the deployment, integration, and configuration of new security solutions and enhancements to existing tools in accordance with best practices.
• Upgrade and harden systems by implementing and maintaining technical and procedural security controls.

Continuous Improvement & Threat Management

• Implement security improvements by assessing the current security environment, evaluating emerging trends, and anticipating future requirements.
• Maintain up-to-date knowledge of the information security threat landscape, including new attack vectors, vulnerabilities, and mitigation techniques.
• Review security publications, attend workshops, and participate in professional development to maintain technical expertise.

Security Awareness, Training & Culture

• Improve the University’s information security culture through awareness campaigns, training sessions, and user education initiatives.
• Keep users and stakeholders informed by communicating system security status and preparing performance and risk reports.

Data Protection & Compliance

• Ensure the confidentiality, integrity, and availability of data stored, processed, or transmitted across workstations, servers, networks, applications, and databases.
• Support compliance with institutional policies, regulatory requirements, and security standards.

Security Solutions, Tools & Vendor Coordination

• Evaluate, select, and acquire new security solutions or enhancements to existing tools in line with University procurement processes.
• Ensure optimal utilisation and integration of security technologies to enhance overall enterprise security posture.

Deliver Accurate Reporting & Documentation

• Prepare reports and summaries, including status reports, problem reports, progress summaries, and system utilisation reports, ensuring accurate and timely information.
• Prepare and maintain relevant technical network specifications and documentation, drawings and schematics, and system documentation, ensuring set standards are met.

Collaborate on Requirements & Stakeholder Engagement

• Engage in ongoing communication with Infrastructure, Application, and business teams to ensure enterprise-wide understanding of security objectives.
• Foster collaboration and obtain feedback to improve security controls and processes continuously.
• Work with technical and business units to review, validate, and support disaster recovery and business continuity plans.

Audit Readiness, Compliance & Gap Resolution

• Manage and lead audit readiness activities for IT, information security, and cybersecurity domains across the University.
• Collaborate with internal audit, compliance, and risk management teams to prepare for scheduled and ad-hoc IT audits.
• Identify, track, and resolve compliance gaps and audit findings by working with infrastructure, application, and business teams.
• Maintain up-to-date and audit-ready documentation, including network and security configurations, system architectures, change logs, asset inventories, and access control records.
• Provide and validate architectural diagrams, standard operating procedures, risk assessments, incident response documentation, and evidence artefacts required for audit and compliance reviews.
• Monitor remediation actions and report audit status, risks, and compliance posture to IT management.

Policies, Procedures & Standards Management

• Manage and contribute to the continuous improvement of information security and IT-related policies and procedures, ensuring alignment with departmental strategies, objectives, KPIs, and standards.
• Assist in the development, review, and regular update of security and IT policies, standards, and procedural documentation.
• Lead and support the creation of detailed Standard Operating Procedures for network configurations, security device management, and critical IT security tasks.
• Ensure policies and SOPs are implemented, communicated, and consistently applied across technical teams.
• Support governance activities by ensuring documentation is audit-ready, current, and aligned with regulatory and institutional requirements.

Reporting

• Prepare accurate and timely reports on SUAD users' support services, incident findings, and case logs for review by the Head of Section.
• Prepare and deliver periodic reports on network performance, availability, bandwidth utilisation, and system health.
• Provide executive summaries highlighting risks, actions taken, and lessons learned.

Related Duties

• Perform other responsibilities and assignments as delegated by the Line Manager to support departmental operations.
• Assist in creating awareness programs and training materials to ensure stakeholders understand and comply with policies.
• Provide briefings or onboarding sessions for new technical staff on applicable procedures and controls.