IT Security Engineer

We are currently seeking for passionate and dynamic IT Security professionals who has the ability to support the implementation and management of information security controls to optimize the overall information security posture of Rotana.

As an IT Security Engineer your role will include key responsibilities such as:

• Developing and driving security policies/standards.
• Ensuring the effectiveness of IT Security solutions.
• Providing security-focused consultative services to the organization.
• Provide expertise and assistance to ensure the organization's infrastructure and information assets are protected.
• Maintain and document security controls and provide direct support to the organization's IT groups.
• Work directly with the customers, third parties and other internal departments and organizations to facilitate information security risk analysis and risk management processes and to identify acceptable levels of residual risk.
• Communicate and educate Rotana colleagues about security policies and industry standards and provide solutions for enterprise/business security issues.
• Trains selected hotel IT Personnel to shadow the Daily system audits and operational service and support management of the of IT Security services in his absence.
• Maintain all the service requests, support logs and the Change management of all the systems, applications, and the network appliances via approved service desk management system.
• Ensure the systems and Managed Services are compliant with security policies, security blueprints and other regulatory requirements.
• Coordinate in the full lifecycle of vulnerability management system.
• Coordinate in the full lifecycle of User Access Management.
• Coordinate in emergency and planned security patch management.
• Coordinate in periodic Business Continuity Plans (BCP)/Disaster Recovery (DR) drills.
• Coordinate in Business Continuity Management (BCM) plans for communications management, once BCP is invoked.
• Coordinate in Security Policy enforcement.
• Provide details of systems such as logs, log format, log type etc. to facilitate integration to SIEM solution.
• Coordinate and support in full life cycle of Security Incident Response (e.g.: detection and identification, containment, eradication, recovery) and Root Cause analysis.
• Support in ongoing certification initiatives, audits, and compliance requirements.

You should ideally have a degree within the information technology field and previous experiences in the same role along with a proven knowledge in the operation and maintenance of the equipment. A good command of English and the ability to fault, find and rectify subsystems are essentials.

Prior experience in handling following IT security controls will be preferred,

• ISMS Framework (ISO 27001)
• Endpoint-Endpoint Detection and Response Solution (EDR) / Extended Detection and Response (XDR) Solution
• Security Information and Event Management (SIEM)
• Vulnerability Management Solution
• Remote Monitoring & Management Solution (RMM)
• Secure Email Gateway Solution
• Identity & Privileged Access Management Solution
• Active Directory Security Audits and Remediation

Certifications in Information Security will be considered as an added advantage.