1 954 Data Security jobs in Bahrain

Job purpose

• Overseeing information security, cybersecurity and IT risk management programs based on industry-accepted information security and risk management frameworks.
• Responsible for the organization's data privacy and protection function to ensure compliance with various regulations and best practices.

2. Primary Duties Performed

• Develop and maintain the cybersecurity Risk Management Framework of the organization for addressing the overall approach for handling cybersecurity risks and managing them in a methodological manner.

• Evaluate employees' information security awareness and provide the necessary training whenever is needed.

• Conduct frequent reviews on Vulnerability Assessment and Penetration Testing (VAPT) and manage vulnerabilities.

• Define the necessary controls to ensure all regulatory requirements related to cybersecurity are met, designed effectively with clear documentation.

• Identify the critical assets of the organization and ensure implementation of risk identification and management strategies for these critical assets.
• To assess technology projects to ensure that cybersecurity is adequately addressed.
• Responsible to identifying and managing cybersecurity risk for all third-party technology engagements and all cloud computing engagements.
• Evaluates and recommends cybersecurity technologies and solutions.
• Review cybersecurity & Risk Management manual and recommend necessary updates.
• Act as Data Protection Officer to identify and evaluate the Company's data processing activities.
• Monitor data management procedures and compliance within the Company.
• Assess Company compliance with Data Protection Private Law.
• Provide advice and arrange training to employees on Data Protection.
• Review and recommend updates on Data Protection Manual.
• Serve as the point of contact between the company and the data protection authorities.
• Performs other related duties assigned by the department head.

3. Secondary Duties Performed

• Assist in implementing risk management framework, policies and programs covering business, financial, operational, technological, and regulatory risks.
• Assist in the development and management of controls and business contingency plans.
• Maintain and update organizational risk register.
• Oversee the regular validation and testing of the Company Business Continuity Plan.
• Review Risk Management manual and recommend necessary updates.

4. Work & Business Contacts

Internal

• Management team and staff.

External

• Regulatory Bodies: Central Bank of Bahrain and Personal Data Protection Authority.
• Law Firms and Legal Advisors.
• Internal and External Auditors.
• VAPT vendors.

Division / Department: Risk Management

Incumbent Reports to: Manager – Risk & Project Management

• Monitor security alerts and logs from various security tools (SIEM, IDS/IPS, firewalls, endpoint security solutions) to detect and respond to potential security incidents.
• Perform threat hunting activities to proactively identify and mitigate emerging threats.
• Conduct vulnerability assessments and penetration testing to identify security weaknesses.
• Investigate security breaches, analyze root causes, and develop remediation plans.
• Implement and maintain security policies, standards, and procedures.
• Assist in the development and execution of incident response plans.
• Provide security awareness training to employees.
• Evaluate and recommend new security technologies and solutions.
• Collaborate with IT teams to ensure secure system configurations and deployments.
• Stay current with the latest cybersecurity trends, threats, and best practices.
• Manage and configure security tools and platforms.
• Participate in security audits and compliance reviews.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in information security or a related role.
• Proficiency with SIEM tools (e.g., Splunk, QRadar), IDS/IPS, firewalls, and antivirus/endpoint detection and response (EDR) solutions.
• Strong understanding of network security principles, protocols, and technologies.
• Experience with vulnerability assessment tools (e.g., Nessus, Qualys) and penetration testing methodologies.
• Knowledge of common attack vectors and threat actor tactics, techniques, and procedures (TTPs).
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong written and verbal communication skills.
• Relevant security certifications such as CompTIA Security+, CEH, or CISSP are highly desirable.
• Ability to work independently and manage multiple priorities in a fast-paced environment.
• Experience with cloud security concepts (AWS, Azure, GCP) is a plus.

• Monitor security alerts and events to detect and respond to potential threats.
• Conduct vulnerability assessments and penetration testing to identify system weaknesses.
• Implement and manage security controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions.
• Develop and enforce security policies, standards, and procedures.
• Respond to security incidents, conduct forensic analysis, and implement remediation actions.
• Analyze security logs and system activities to identify anomalies and patterns of compromise.
• Manage and maintain Security Information and Event Management (SIEM) systems.
• Conduct security awareness training for employees.
• Participate in security audits and ensure compliance with relevant regulations.
• Stay current with emerging cybersecurity threats, vulnerabilities, and technologies.
• Collaborate with IT teams to implement security best practices in system design and deployment.
• Develop and maintain security documentation, including incident response plans and risk assessments.
• Evaluate and recommend new security tools and technologies.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 4 years of experience in information security or cybersecurity roles.
• Strong knowledge of network security, operating systems security, and application security.
• Experience with security tools such as SIEM, IDS/IPS, firewalls, and vulnerability scanners.
• Understanding of security frameworks and compliance standards (e.g., ISO 27001, NIST).
• Excellent analytical, problem-solving, and investigative skills.
• Strong communication and interpersonal skills, with the ability to explain technical concepts clearly.
• Relevant security certifications such as CISSP, CompTIA Security+, or CEH are highly desirable.
• Ability to work effectively in a team environment and manage multiple priorities.

• Monitor security alerts and logs from various security systems (e.g., SIEM, IDS/IPS, firewalls) to detect and analyze potential threats.
• Conduct vulnerability assessments and penetration testing to identify weaknesses in systems and applications.
• Investigate and respond to security incidents, including malware outbreaks, data breaches, and unauthorized access.
• Implement and maintain security controls and countermeasures to protect against cyber threats.
• Develop and update security policies, procedures, and guidelines.
• Conduct security awareness training for employees.
• Manage and configure security tools such as firewalls, antivirus software, and endpoint detection and response (EDR) solutions.
• Perform risk assessments and develop mitigation strategies for identified vulnerabilities.
• Ensure compliance with relevant industry regulations and standards (e.g., ISO 27001, GDPR).
• Stay current with emerging security threats, trends, and technologies.
• Collaborate with IT teams to implement security best practices across the infrastructure.
• Assist in the development and maintenance of incident response plans.
• Perform forensic analysis on compromised systems.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in information security or a related IT security role.
• In-depth knowledge of cybersecurity principles, frameworks, and best practices.
• Experience with security monitoring tools, vulnerability scanners, and SIEM solutions.
• Proficiency in network security, operating system security, and application security.
• Understanding of common cyberattack vectors and mitigation techniques.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and interpersonal skills for collaborating with various teams.
• Relevant security certifications such as CompTIA Security+, CISSP, or CEH are highly desirable.
• Ability to work effectively in a fast-paced, deadline-driven environment.
• Experience with incident response procedures.

• Monitor security systems and network devices for security breaches and suspicious activity.
• Investigate, respond to, and resolve security incidents.
• Conduct vulnerability assessments and penetration testing.
• Implement and maintain security controls and technologies.
• Develop and enforce information security policies and procedures.
• Stay current with emerging cybersecurity threats and trends.
• Provide security awareness training to employees.
• Perform security audits and risk assessments.
• Collaborate with IT teams to ensure secure system configurations.
• Manage and maintain security hardware and software.

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience as an Information Security Analyst or similar role.
• Strong knowledge of cybersecurity principles and best practices.
• Experience with security tools such as SIEM, firewalls, IDS/IPS.
• Excellent analytical and problem-solving skills.
• Proficiency in security frameworks (e.g., NIST, ISO 27001).
• Relevant security certifications (e.g., CISSP, Security+).
• Strong communication and interpersonal skills.
• Ability to work independently and in a team environment.

• Monitor security alerts and events from various security tools (SIEM, IDS/IPS).
• Investigate and respond to security incidents, including malware analysis and forensic investigation.
• Conduct vulnerability assessments and penetration testing to identify security weaknesses.
• Implement and manage security controls and technologies (firewalls, endpoint security, encryption).
• Develop and update security policies, procedures, and guidelines.
• Ensure compliance with information security standards and regulations (e.g., ISO 27001, GDPR).
• Perform risk assessments and identify potential threats to the organization.
• Provide security awareness training to employees.
• Stay abreast of the latest cybersecurity threats, vulnerabilities, and technologies.
• Collaborate with IT teams to implement security best practices across the infrastructure.

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 4 years of experience in information security or cybersecurity.
• Relevant certifications such as CISSP, CISM, CompTIA Security+.
• Strong knowledge of network security, cybersecurity principles, and threat landscape.
• Experience with security tools like SIEM, IDS/IPS, firewalls, and endpoint protection.
• Proficiency in vulnerability assessment and penetration testing methodologies.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and report-writing skills.
• Ability to work independently and manage tasks effectively in a remote environment.
• Experience with cloud security is a plus.

• Monitor security alerts and events using SIEM (Security Information and Event Management) tools.
• Analyze security threats and vulnerabilities, and recommend mitigation strategies.
• Conduct regular security assessments and penetration testing.
• Develop and enforce information security policies, standards, and procedures.
• Respond to security incidents, including investigation, containment, and eradication.
• Implement and manage security controls, such as firewalls, intrusion detection/prevention systems, and antivirus software.
• Educate employees on security best practices and awareness training.
• Stay updated on the latest cybersecurity threats, trends, and technologies.
• Collaborate with IT teams to ensure secure system configurations.
• Prepare security reports and metrics for management.
• Assist in developing and testing the business continuity and disaster recovery plans.
• Ensure compliance with relevant regulations and standards.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Proven experience in information security, cybersecurity analysis, or a similar role.
• Strong understanding of network security principles, protocols, and technologies.
• Experience with SIEM tools (e.g., Splunk, QRadar), vulnerability scanners, and penetration testing tools.
• Knowledge of security frameworks such as NIST, ISO 27001, or CIS Controls.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Relevant certifications such as CompTIA Security+, CEH, CISSP are a plus.
• Ability to work effectively in a team environment.
• Demonstrated ability to handle sensitive information with discretion.