Cyber security architect provides guidance and direction in the best-practices implementation of security technologies such as firewalls, intrusion prevention/detection, secure email gateways, endpoint protection, SIEM/UEBA, etc. Accountabilities Core Responsibilities: Participate as the security liaison for critical IT initiatives such as disaster recovery, master data modeling, EDW Identify, explore and expose knowledge of Division technical capabilities Ensure Endpoint and Application data security products accurately model threats facing the business Design, document & demonstrate point solutions for high priority threats Integrated end to end process and technology updates for sustained, efficient mitigation Assess, critique, improve and report on data protection effectiveness in high priority system, project and process designs Partner with Cyber solutions incubation, red team, attack analysis, threat intelligence and engineering teams to ensure thorough and up to date catalogues of data centric threats and possible mitigations Communicates the above layers and also the physical infrastructure architecture the technologies, protocols, boundaries, and products of the component architecture to engineers, developers, and administrators Perform IT security assessments or audits of internal networks and systems under the direction of the IT Security management This position will be responsible for conducting process gap analysis and documenting and analyzing “as-is” processes to identify areas for improvement, and recommending, developing, and implementing “to-be” processes, identifying associated issue
Self-Management:
Defines performance goals at the start of the year in discussion with the reporting manager and ensures that the goals are achieved during the course of the year
Takes ownership of his/her learning agenda by identifying development needs in consultation with the manager and agreeing on the individual development plan which goes beyond just training and development
Keeps abreast of professional developments, new techniques, and current issues through continued education and professional growth
Educational Qualifications and Certificates
Expertise with industry-standard frameworks (NIST, PCI, Safe Harbor, ISO, HIPAA, CSF, Sarbanes Oxley)
Any industry certifications, such as CSSLP, CRISC, CISA, CISM, CGEIT, CEH, GIAC
Experience with Vendor Information Security Risk Assessment, Policy Management, and Exception Handling
Experience with implementing and supporting Enterprise Device Management in support of BYOD Experience:
Minimum of 6 - 8 years’ experience demonstrated expertise in relevant information security technologies such as Data Protection, Encryption, Operating System and Application Security or other appropriate areas for a large construction / real estate organization Skills Language skills
Written and spoken English is essential, Arabic is preferred Additional skills
Problem-solving skills Ability to prioritize workload
Planning and organizing
Extensive knowledge in the Real Estate field Key Interactions Internal Interactions