What Information Security Manager Jobs are in Manama?

• Develop, implement, and maintain the organization's Information Security program, policies, standards, and procedures.
• Oversee and manage the IT risk management process, including identification, assessment, and mitigation of security risks.
• Ensure compliance with relevant laws, regulations, and industry standards (e.g., ISO 27001, NIST, GDPR, PCI DSS).
• Lead internal and external security audits and assessments, and manage remediation efforts.
• Develop and manage security awareness training programs for all employees.
• Oversee the incident response planning and execution process.
• Manage security vendor relationships and evaluate security solutions.
• Lead and mentor the information security team, fostering a culture of continuous improvement.
• Report on the organization's security posture and compliance status to senior management and the board.
• Stay abreast of emerging threats, vulnerabilities, and regulatory changes impacting information security.

• Master's degree or Bachelor's degree in Information Security, Computer Science, or a related field.
• Minimum of 7 years of progressive experience in information security, with at least 3 years in a management or leadership role.
• Proven experience in developing and implementing GRC programs.
• In-depth knowledge of information security principles, frameworks (ISO 27001, NIST), and regulatory requirements.
• Strong understanding of risk management methodologies and tools.
• Excellent leadership, communication, and interpersonal skills.
• Experience managing security teams and budgets.
• Ability to develop and present clear, concise reports and recommendations to executive leadership.
• Professional certifications such as CISSP, CISM, CISA, or CRISC are highly desirable.

• Executive-level compensation package including performance bonuses.
• Comprehensive health, dental, and vision insurance.
• Opportunities for leadership development and executive training.
• Key role in shaping the security strategy in Isa Town .
• Access to advanced security tools and resources.
• Generous vacation time and corporate holidays.
• Company car or transportation allowance.
• Retirement savings plan with employer match.

• Develop, implement, and maintain the organization's information security risk management program.
• Lead the identification, assessment, and prioritization of information security risks.
• Define and implement risk mitigation strategies and controls.
• Conduct regular risk assessments and reviews of security controls effectiveness.
• Develop and maintain risk registers and reporting dashboards for senior management.
• Ensure compliance with relevant regulatory and industry standards for risk management.
• Collaborate with business units to embed risk management principles into their processes.
• Manage third-party risk assessments and vendor security reviews.
• Develop and deliver risk management training and awareness programs.
• Stay abreast of emerging risks, threats, and regulatory changes impacting information security.

• Bachelor's degree in Information Security, Computer Science, Business Administration, or a related field. A Master's degree is a plus.
• Minimum of 7 years of experience in information security, with at least 4 years in a risk management or security governance role.
• Proven experience in developing and implementing comprehensive risk management frameworks (e.g., NIST RMF, ISO 31000).
• Strong understanding of various risk assessment methodologies and tools.
• Excellent knowledge of information security principles, best practices, and technologies.
• Experience with regulatory compliance requirements (e.g., GDPR, PCI DSS, HIPAA).
• Strong leadership, communication, and interpersonal skills.
• Ability to influence and collaborate effectively with stakeholders at all levels of the organization.
• Project management skills are beneficial.
• Relevant certifications such as CISM, CRISC, CISSP, or CRM are highly desirable.

We are seeking a proactive and knowledgeable Information Security Consultant for our client, a dynamic advisory firm based in Seef, BH . This role involves providing expert advice and practical solutions to a diverse range of clients on various information security matters. The consultant will assess security risks, develop strategic security plans, and assist clients in implementing best practices and compliance measures. This is an excellent opportunity for an experienced security professional to leverage their expertise across multiple industries and client environments. The ideal candidate possesses strong analytical skills, excellent communication capabilities, and a commitment to delivering high-quality, actionable security recommendations. The role requires adaptability and a broad understanding of current cybersecurity challenges.

• Conduct comprehensive information security risk assessments for clients.
• Develop and present strategic security recommendations and roadmaps.
• Advise clients on security best practices, policies, and procedures.
• Assist clients in achieving compliance with relevant regulations (e.g., GDPR, ISO 27001).
• Evaluate and recommend security technologies and solutions.
• Support clients in incident response planning and execution.
• Perform security awareness training for client staff.
• Stay updated on emerging cybersecurity threats and industry trends.
• Collaborate effectively with client stakeholders at all levels.
• Prepare detailed assessment reports and presentations.

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
• Minimum of 4 years of experience in information security consulting or a related field.
• Strong understanding of security frameworks, risk management principles, and compliance requirements.
• Proficiency in conducting security assessments and vulnerability analyses.
• Excellent analytical and problem-solving skills.
• Exceptional verbal and written communication skills, with strong presentation abilities.
• Ability to manage multiple client projects simultaneously.
• Experience with various security domains (e.g., network, application, cloud, data security).
• Relevant certifications such as CISSP, CISM, CRISC, or CISA are highly desirable.
• Ability to work independently and as part of a client-facing team.

This consulting role offers a competitive compensation package, often structured as a fixed-term contract with a strong hourly or project-based rate. The role in Seef provides significant flexibility and the opportunity to work with a variety of clients and technologies. You will gain exposure to diverse business challenges and contribute to critical security initiatives, fostering substantial professional development and career advancement in the field of information security.

• Monitor security alerts from various systems, including SIEM, IDS/IPS, and EDR.
• Investigate potential security incidents and anomalies, determine scope and impact.
• Perform initial triage and analysis of security events, escalating as necessary.
• Assist in the implementation and tuning of security tools and technologies.
• Contribute to the development and maintenance of security documentation and procedures.
• Participate in incident response activities, including documentation and post-incident analysis.
• Conduct vulnerability scans and assist in the remediation of identified weaknesses.
• Stay informed about current cybersecurity threats and trends.
• Support security awareness initiatives within the organization.
• Collaborate with IT teams to ensure security best practices are followed.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 1-3 years of experience in information security or IT operations with a security focus.
• Familiarity with security concepts, network protocols, and operating systems.
• Experience with SIEM tools (e.g., Splunk, LogRhythm) is a plus.
• Basic understanding of incident response procedures.
• Strong analytical and problem-solving skills.
• Good communication and teamwork abilities.
• Eagerness to learn and develop in the field of cybersecurity.
• Ability to work effectively in a team environment.
• Attention to detail and a proactive approach to security.

• Competitive salary.
• Comprehensive health, dental, and vision insurance.
• Paid time off and company holidays.
• Opportunities for professional development and certifications.
• Retirement savings plan.
• Dynamic work environment in a prime Seef location.
• Access to modern security tools and technologies.
• Career advancement opportunities within a reputable financial institution.
• Employee assistance program.
• Collaborative and supportive team culture.

• Monitor and analyze threat intelligence feeds from various sources (open-source, commercial, government).
• Identify, research, and track cyber threat actors, campaigns, and malware relevant to the organization.
• Develop and maintain threat intelligence reports, briefings, and alerts for various audiences.
• Integrate threat intelligence into security operations, SIEM, and incident response processes.
• Conduct in-depth analysis of threat actors' tactics, techniques, and procedures (TTPs).
• Support incident response investigations with timely and relevant threat intelligence.
• Contribute to threat hunting activities based on intelligence gathered.
• Evaluate and recommend new threat intelligence tools and platforms.
• Collaborate with internal security teams and external partners to share and gather intelligence.
• Maintain an understanding of the global threat landscape and its impact on the organization.

• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• 2-5 years of experience in information security, with a focus on threat intelligence or security operations.
• Proven ability to analyze threat data and produce actionable intelligence.
• Experience with threat intelligence platforms (TIPs) and SIEM tools.
• Familiarity with various threat intelligence frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain).
• Understanding of malware analysis, network forensics, and host forensics concepts.
• Excellent research, analytical, and critical thinking skills.
• Strong written and verbal communication skills, with the ability to present complex information clearly.
• Relevant certifications (e.g., GCTI, CySA+) are a plus.
• Experience working in the **Seef, BH** region is desirable.

Our client, a prominent retail group, is seeking a dedicated Information Security Analyst with specialized expertise in SIEM (Security Information and Event Management) systems. This role, based in Tubli, Capital, BH , is crucial for monitoring, analyzing, and responding to security events detected by the SIEM platform. You will play a vital role in identifying potential threats, investigating security incidents, and ensuring the integrity of our client's information assets. The ideal candidate will have a strong technical aptitude, a keen eye for detail, and a thorough understanding of log analysis, threat intelligence, and incident response procedures. This position offers an excellent opportunity to work with advanced security tools and contribute significantly to the protection of a large-scale retail network. We are committed to maintaining a secure operating environment and are looking for a proactive individual to enhance our security operations center capabilities. Join us in fortifying our defenses and ensuring the safety of our client's digital ecosystem.

• Monitor SIEM dashboards and alerts for security incidents and anomalies.
• Analyze security logs from various sources to identify potential threats and breaches.
• Investigate security alerts, conduct root cause analysis, and escalate incidents as needed.
• Develop and tune SIEM correlation rules and dashboards to improve threat detection.
• Participate in incident response activities, including containment, eradication, and recovery.
• Maintain and optimize the SIEM infrastructure.
• Collaborate with IT teams to ensure effective log collection and management.
• Stay informed about the latest cybersecurity threats and attack vectors.
• Generate regular reports on security events, incidents, and trends.
• Assist in the development and implementation of security policies and procedures.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in information security, with a focus on SIEM operations.
• Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm, Microsoft Sentinel).
• Proficiency in analyzing security logs from diverse sources (firewalls, servers, endpoints, applications).
• Understanding of network protocols, operating systems (Windows, Linux), and common attack techniques.
• Experience with incident response methodologies and procedures.
• Knowledge of threat intelligence and its application in SIEM.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent communication and documentation skills.
• Relevant certifications such as CompTIA Security+, GIAC Certified SOC Analyst (GSA), or vendor-specific SIEM certifications are a plus.

Our client offers a competitive salary, comprehensive health insurance, and a positive work environment in Tubli, Capital, BH . We believe in investing in our employees' growth and provide opportunities for advanced training and professional development in the field of cybersecurity. This role comes with access to cutting-edge SIEM technology and the chance to work with a skilled team of security professionals. A retirement savings plan and generous paid time off are part of the benefits package. Join us and become an integral part of our client's mission to protect its digital assets and maintain customer trust. This is a great opportunity to build a solid career in security operations.

• Develop and implement security policies, standards, and procedures to protect information assets.
• Conduct regular security risk assessments and vulnerability analyses.
• Monitor security systems and respond to security incidents in a timely and effective manner.
• Manage and maintain security technologies, including firewalls, intrusion detection/prevention systems, and endpoint security solutions.
• Perform security awareness training for employees to foster a security-conscious culture.
• Investigate and report on security breaches, providing recommendations for remediation.
• Collaborate with IT and other departments to ensure security is integrated into all aspects of operations.
• Stay up-to-date with the latest security threats, vulnerabilities, and technologies.
• Contribute to the development and testing of incident response plans.
• Ensure compliance with relevant regulatory requirements and industry best practices.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 5 years of experience in information security roles.
• Proven experience with security frameworks such as ISO 27001, NIST, or GDPR.
• Strong understanding of network security, cryptography, and security auditing.
• Proficiency in security tools like SIEM, vulnerability scanners, and penetration testing tools.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to explain technical concepts to non-technical audiences.
• Relevant security certifications such as CISSP, CISM, or CEH are highly desirable.
• Experience working within the financial services sector is a plus.
• Ability to work effectively in a team environment and independently.

• Competitive salary package.
• Comprehensive health, dental, and vision insurance.
• Generous paid time off and public holidays.
• Opportunities for professional development and training.
• Exposure to cutting-edge security technologies.
• A collaborative and supportive work environment in **Manama**.
• Potential for career advancement within a leading organization.
• Hybrid work model offering flexibility.

• Develop, implement, and manage a comprehensive information security strategy and program aligned with business objectives.
• Establish and maintain information security policies, standards, and procedures across the organization.
• Oversee the identification, assessment, and mitigation of information security risks and threats.
• Lead incident response planning and execution, ensuring timely and effective resolution of security breaches.
• Manage the security operations center (SOC) and oversee security monitoring, detection, and response activities.
• Ensure compliance with relevant information security regulations and standards (e.g., GDPR, PCI DSS, ISO 27001).
• Develop and deliver security awareness training programs for all employees.
• Manage relationships with third-party security vendors and service providers.
• Lead and mentor the information security team, fostering a culture of security excellence.
• Advise senior leadership and the board on information security risks and strategies.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Master's degree or relevant certifications (CISSP, CISM, CISA) are highly preferred.
• Minimum of 10-12 years of progressive experience in information security, with at least 5 years in a senior leadership role (e.g., CISO, VP of Security).
• Proven experience in developing and implementing enterprise-wide security programs and frameworks.
• In-depth knowledge of cybersecurity technologies, threats, and best practices, including network security, data protection, and cloud security.
• Strong understanding of risk management methodologies and regulatory compliance requirements in the financial services industry.
• Excellent leadership, communication, and interpersonal skills, with the ability to influence stakeholders at all levels.
• Demonstrated ability to manage and lead security incidents effectively.
• Experience working within the **Bahrain** regulatory environment is a significant asset.
• Familiarity with a **Hybrid** work model and its operational requirements.

• Executive-level compensation package, including a competitive base salary and performance-based bonus.
• Comprehensive executive health and wellness benefits.
• Relocation assistance if needed.
• Opportunity to shape and lead the information security strategy for a prominent financial institution.
• Exposure to cutting-edge security technologies and methodologies.
• A dynamic work environment with significant strategic impact.
• Contribute to enhancing the security posture of the organization in **Muharraq**.

Our client, a leading advisory firm, is seeking an experienced Information Security Consultant specializing in Risk Management to join their practice. This role will involve assessing security risks for a diverse range of clients, developing risk mitigation strategies, and advising on best practices to enhance their security posture. You will work with clients to understand their unique business needs and translate them into effective security solutions. This position offers a hybrid work model, requiring collaboration both on-site with clients and within our offices, as well as remote flexibility. The ideal candidate possesses strong analytical skills, a deep understanding of risk assessment methodologies, and excellent communication abilities to convey complex security concepts to non-technical stakeholders. You will play a crucial role in helping clients navigate the complex landscape of cybersecurity risks and compliance.

• Conduct comprehensive information security risk assessments for clients across various industries.
• Identify, analyze, and prioritize potential security risks and vulnerabilities.
• Develop and implement effective risk mitigation strategies and action plans.
• Advise clients on security best practices, policies, and procedures.
• Assist clients in meeting regulatory and compliance requirements related to risk management.
• Develop security awareness and training materials for client personnel.
• Prepare detailed reports and presentations on risk assessment findings and recommendations.
• Collaborate with client stakeholders to implement security improvements.
• Stay current with emerging security threats, vulnerabilities, and risk management frameworks.
• Contribute to the development of the firm's risk management methodologies and service offerings.

• Bachelor's degree in Information Security, Computer Science, Business, or a related field.
• Minimum of 5 years of experience in information security risk management, assessment, or consulting.
• Proven experience with risk assessment methodologies (e.g., FAIR, NIST SP 800-30).
• Strong understanding of information security principles, frameworks (e.g., ISO 27001, NIST CSF), and best practices.
• Experience with various security domains including network security, application security, and data privacy.
• Excellent analytical, problem-solving, and critical thinking skills.
• Exceptional written and verbal communication skills, with the ability to present complex information clearly to diverse audiences.
• Strong client-facing and interpersonal skills.
• Ability to work effectively both independently and as part of a team in a hybrid environment.
• Relevant certifications such as CRISC, CISA, CISSP, or CISM are highly desirable.

Our client offers a dynamic consulting environment with excellent professional development opportunities, including:

• Competitive compensation package for contractors.
• Opportunity to work with a wide range of clients and industries.
• Exposure to diverse security challenges and technologies.
• Professional development and training budgets.
• Mentorship from experienced security leaders.
• Flexible hybrid work arrangement.
• A collaborative and knowledge-sharing culture.