2 155 Information Governance jobs in Bahrain

This role will be responsible for handling the implementation and maintenance of GFG and subsidiaries Information Security Management System in accordance with local laws, regulations and best practices.

1. Support Head Information Security in defining and implementation of information security governance documentation including policies, manual, SOPs and guidelines.
2. Support Head Information Security in conducting Risk-based Assessment of Information Security policies and operating procedures owned by other departments within the group against industry-recognized security standards and best practices, ensuring adequate preventive, detective and corrective controls to provide data integrity, confidentiality and availability.
3. Support Head Information Security in conducting analysis of security requirements and controls to identify gaps and provides recommendations of industry best practices, trends, and technology products.
4. Support Head Information Security in conducting on annual basis and continuous basis Information Security Risk Assessment, identify business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement.
5. Develop and maintain information register and ensure that the information is classified by data owners and protected in accordance with the information classification framework.
6. Conducting awareness sessions to the new and existing employees on information security policies and global trends as per the awareness program.
7. Support in defining information security requirements in information systems, projects and third parties in cooperation with the delivery departments i.e. ICT, and FM.
8. Support in conducting incident investigation for information security incidents and ensuring that the necessary actions and disciplinary actions are taken.
9. Support in defining information security requirements to be included in ICT Disaster recovery plans to ensure continuity of information security controls during disasters.
10. Support in conducting internal and external audits to ensure that BAC Information Security Management system complies with best practices and local regulations.
11. Improve the maturity of the information security management system through suggesting and supporting in the implementation of technologies such as DLP solutions, GRC solutions etc.

Bachelor’s degree in information technology.

Certified Information Security Auditor (CISA) (Preferred)

3+ years of Information Security experience

1. Proven ability to establish and manage “dotted-line” business relationships to deliver agreed outcomes/deliverables.
2. Ability to work effectively with all levels of personnel across the organization.
3. Proven ability to communicate clearly and appropriately based on audience with excellent facilitation and customer service skills.
4. Excellent written and verbal communications, critical thinking skills, effective interpersonal skills, strong formal presentation abilities.
5. Ability to be flexible and work effectively with ambiguity and change.

• Monitor security alerts and events from various security systems (SIEM, IDS/IPS, firewalls, etc.).
• Conduct vulnerability assessments and penetration testing to identify weaknesses.
• Investigate and respond to security incidents, including analyzing the scope, impact, and root cause.
• Develop and implement security policies, procedures, and best practices.
• Configure and maintain security tools and technologies.
• Provide recommendations for security enhancements and architectural improvements.
• Assist in developing and delivering security awareness training to employees.
• Stay current with emerging security threats, vulnerabilities, and technologies.
• Collaborate with IT teams to ensure security is integrated into system design and deployment.
• Document security incidents, investigations, and remediation efforts.
• Ensure compliance with relevant data protection regulations and standards.
• Participate in security audits and reviews.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 2-4 years of experience in information security, cybersecurity operations, or a related role.
• Strong understanding of network protocols, operating systems (Windows, Linux), and cybersecurity concepts.
• Experience with security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection.
• Knowledge of incident response frameworks and methodologies.
• Relevant certifications such as CompTIA Security+, CEH, or GIAC are a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and reporting abilities.
• Ability to work effectively both independently and as part of a team.
• Proactive approach to identifying and mitigating security risks.

• Monitoring security alerts and events from various security systems (SIEM, IDS/IPS, firewalls, etc.).
• Investigating security incidents, analyzing their impact, and recommending containment and eradication strategies.
• Conducting vulnerability assessments and penetration testing to identify security weaknesses.
• Implementing and managing security controls, policies, and procedures.
• Assisting in the development and maintenance of security awareness training programs for employees.
• Staying current with the latest cybersecurity threats, vulnerabilities, and mitigation techniques.
• Participating in security audits and ensuring compliance with relevant regulations and standards (e.g., ISO 27001, GDPR).
• Developing and maintaining security documentation, including incident response plans and security architecture diagrams.
• Collaborating with IT and other departments to ensure security is integrated into all aspects of the business.
• Providing technical support and guidance on security-related matters.
• Performing security reviews of applications and systems.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in information security analysis or a related role.
• Strong understanding of networking protocols, operating systems, and common security vulnerabilities.
• Hands-on experience with SIEM tools, firewalls, antivirus software, and other security technologies.
• Knowledge of incident response procedures and digital forensics is a plus.
• Relevant security certifications such as CompTIA Security+, CISSP, or CEH are highly desirable.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to explain complex technical issues to both technical and non-technical audiences.
• Ability to work independently and as part of a collaborative team.
• Proactive attitude towards identifying and mitigating security risks.

• Plan, execute, and report on information security audits across various systems, applications, and infrastructure.
• Assess the effectiveness of internal controls designed to protect information assets.
• Identify security vulnerabilities, risks, and compliance gaps, and provide actionable recommendations for remediation.
• Evaluate adherence to security policies, procedures, and industry best practices (e.g., ISO 27001, NIST).
• Review security logs, system configurations, and access controls to ensure integrity and compliance.
• Work closely with IT and security teams to develop remediation plans and track their implementation.
• Assist in the development and refinement of information security policies and standards.
• Stay current with emerging security threats, vulnerabilities, and audit techniques.
• Prepare detailed audit reports for management, highlighting findings, risks, and recommendations.
• Conduct follow-up audits to verify the effectiveness of implemented controls.
• Collaborate with external auditors and regulatory bodies as needed.
• Contribute to the overall risk management framework of the organization.
• Maintain documentation related to audit activities and findings.

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Minimum of 3-5 years of experience in IT auditing, information security, or risk management.
• Solid understanding of information security principles, frameworks (e.g., ISO 27001, NIST CSF), and audit methodologies.
• Experience with risk assessment techniques and vulnerability management.
• Familiarity with various operating systems, network devices, and security technologies.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent written and verbal communication skills, with the ability to produce clear and concise audit reports.
• Relevant certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or CISSP are highly desirable.
• Ability to work independently and as part of a team, manage multiple tasks, and meet deadlines.