457 Ciso jobs in Bahrain

• Develop, implement, and maintain a comprehensive information security program aligned with business objectives and regulatory requirements.
• Establish and enforce security policies, standards, and procedures across the organization.
• Oversee risk management, vulnerability assessment, and penetration testing activities.
• Lead incident response planning and execution, ensuring swift and effective mitigation of security breaches.
• Manage the security operations center (SOC) and ensure continuous monitoring of security alerts.
• Develop and manage the information security budget, including investments in security technologies and personnel.
• Build and lead a high-performing global security team, fostering a culture of security awareness and best practices.
• Advise the executive leadership team and board of directors on cybersecurity risks and strategies.
• Ensure compliance with relevant data protection regulations (e.g., GDPR, CCPA) and industry-specific security standards.
• Evaluate and implement state-of-the-art security technologies and solutions.
• Foster strong relationships with external security partners and law enforcement agencies.
• Drive continuous improvement initiatives within the cybersecurity function.

• Master's degree in Computer Science, Information Security, or a related field; CISSP, CISM, or equivalent certification is mandatory.
• 12+ years of progressive experience in information security, with at least 5 years in a senior leadership role (e.g., CISO, VP of Security).
• Proven experience in developing and managing enterprise-wide security programs.
• In-depth knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001), threat intelligence, incident response, and digital forensics.
• Experience with cloud security (AWS, Azure, GCP) and modern security architectures.
• Strong understanding of data privacy regulations and compliance requirements.
• Exceptional strategic thinking, problem-solving, and decision-making abilities.
• Excellent communication, interpersonal, and influencing skills, with the ability to engage effectively with all levels of the organization.
• Proven ability to lead and motivate geographically dispersed teams.
• Experience in building and managing security operations centers.

This role will be responsible for handling the implementation and maintenance of GFG and subsidiaries Information Security Management System in accordance with local laws, regulations and best practices.

1. Support Head Information Security in defining and implementation of information security governance documentation including policies, manual, SOPs and guidelines.
2. Support Head Information Security in conducting Risk-based Assessment of Information Security policies and operating procedures owned by other departments within the group against industry-recognized security standards and best practices, ensuring adequate preventive, detective and corrective controls to provide data integrity, confidentiality and availability.
3. Support Head Information Security in conducting analysis of security requirements and controls to identify gaps and provides recommendations of industry best practices, trends, and technology products.
4. Support Head Information Security in conducting on annual basis and continuous basis Information Security Risk Assessment, identify business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement.
5. Develop and maintain information register and ensure that the information is classified by data owners and protected in accordance with the information classification framework.
6. Conducting awareness sessions to the new and existing employees on information security policies and global trends as per the awareness program.
7. Support in defining information security requirements in information systems, projects and third parties in cooperation with the delivery departments i.e. ICT, and FM.
8. Support in conducting incident investigation for information security incidents and ensuring that the necessary actions and disciplinary actions are taken.
9. Support in defining information security requirements to be included in ICT Disaster recovery plans to ensure continuity of information security controls during disasters.
10. Support in conducting internal and external audits to ensure that BAC Information Security Management system complies with best practices and local regulations.
11. Improve the maturity of the information security management system through suggesting and supporting in the implementation of technologies such as DLP solutions, GRC solutions etc.

Bachelor’s degree in information technology.

Certified Information Security Auditor (CISA) (Preferred)

3+ years of Information Security experience

1. Proven ability to establish and manage “dotted-line” business relationships to deliver agreed outcomes/deliverables.
2. Ability to work effectively with all levels of personnel across the organization.
3. Proven ability to communicate clearly and appropriately based on audience with excellent facilitation and customer service skills.
4. Excellent written and verbal communications, critical thinking skills, effective interpersonal skills, strong formal presentation abilities.
5. Ability to be flexible and work effectively with ambiguity and change.

• Develop, implement, and maintain the organization's information security strategy and policies.
• Oversee risk management processes, including identifying, assessing, and mitigating security risks.
• Manage and direct the information security team.
• Design and implement security architecture and controls to protect information assets.
• Develop and manage the incident response plan and lead response efforts.
• Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, GDPR).
• Conduct regular security audits and assessments.
• Manage security awareness training programs for employees.
• Evaluate and implement new security technologies and solutions.
• Liaise with external auditors, regulators, and law enforcement agencies as needed.

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• 10+ years of progressive experience in information security, with at least 3 years in a leadership role.
• In-depth knowledge of information security principles, frameworks, and best practices.
• Proven experience in developing and implementing comprehensive security programs.
• Strong understanding of cybersecurity threats, vulnerabilities, and mitigation techniques.
• Experience with risk management, incident response, and compliance.
• Excellent leadership, communication, and interpersonal skills.
• Relevant certifications such as CISSP, CISM, or CISA are highly desirable.
• Experience with cloud security is a plus.