Manager Information Security Assurance and Access Management – Commercial Bank of Kuwait – Kuwait

Operational Duties

·         Define Minimum Security baselines for Bank’s system in line with Regulatory requirements.

·         Evaluate the security effectiveness of implemented technical controls

·         Design Security Solutions to align with security requirements

·         Advise and provide inputs for the security projects that address identified risks and business security requirements.

·         Assist resource owners and IT staff in understanding and responding to security gaps.

·         Perform and manage vulnerability assessment and penetration test \[Internal/External\] analysis on the Bank’s computing resources to demonstrate security control effectiveness/gaps.

·         Provide support and guidance for legal and regulatory compliance efforts related to Data Protection.

·         Provide expert guidance on security matters for other IT projects

·         Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks

·         Analyze current security posture and identify gaps. Design and implement a plan to mitigate such gaps.

·         Define and design Disaster recovery Plans for Information security operation

·         Assist with security breach investigations to guide the refinement of information security policies and practices

·         Manage the periodic assessment of security systems and applications to ensure new threats are identified and managed and the security of the organization’s assets are maintained

·         Provide Security Awareness training, and guidance to all Internal Users.

·         Manage the Provision and de-provision of User access based on the request for the scoped system /applications including privileged access requirement raised by ITD.

·         Lead the Roles and Groups definition in coordination with Business Units for the scoped system/application

·         Manage User Access Management Function to ensure the day to day processing of access management requests are carried out in efficient manner

·         Manage the allocation of access privileges of users to ensure appropriate security settings are applied in accordance with Organization policies and application owner-defined parameters

·         Manage Periodic User Access review against the entitlements provided to be validated by business owner.