Endpoint Security Operations Team Leader

Role: Endpoint Security Operations Team Leader

Location: Abu Dhabi

Role Purpose:

• Manage and Maintain Security devices, Tools / Products implemented at ADIB for day-to-day tasks

• Regular monitoring of Security Logs and Events for IT Security devices to review security events and alerts and proactively detect actual or potential attacks to ADIB network

• Provide administrative, organizational and technical support that assists the Manager – IT SECURITY OPERATIONS to accomplish department tasks and act as the backup in the Manager’s absence

• Follow the security hardening baselines / guidelines and generate compliance reports

• On call-availability for critical alert(s) / issue(s) reported by ADIB Command Center after working-hours, weekends and public holidays and proper escalation to Manager IT SECURITY OPERATIONS

• Optimize, automate and streamline services provided by IT SECURITY OPERATIONS

• Ensure compliance to published policies and procedures such as (PMO, ITIL processes, ISO 9001 & 27001) by performing according to what has been documented

• Ensure accurate and timely submission of required documentation and status reporting to management

• Ensure compliance to ADIB processes (HR, Legal & Sharia) related to ITD

• Ensure satisfactory department audit with no high risk finding on department. Any finding to be resolved within agreed time (with Audit and Management)

Key Accountabilities of the role:

IT Security Admin Unit (20%):

• Assist IT SECURITY OPERATIONS Manager in formulating tasks list for IT SECURITY OPERATIONS Unit in a manner that tasks are aligned with overall IT Division goals

• Provide administrative, organizational and required support to accomplish department deliverables and tasks

• Backup role in IT SECURITY OPERATIONS related tasks in case of IT SECURITY OPERATIONS Manager’s absence

• Prepare Management Dashboards and reporting

• Ensure team provides excellent support, which leads to user’s satisfaction.

IT Security and Device Management (40%):

• Monitor and Manage Security devices and tools that implemented within ADIB

• Troubleshoot technical issues related to Security

• Perform security device health checks as per approved checklist(s)

• Manage security device configuration change(s) as per ADIB standard Change Management Process

• Updating security devices with latest stable software and signature releases (upon schedule of CSA)

• Ensure security of all ADIB public services hosted in the DMZ

• Security configuration of perimeter devices according to the Best-Practices and vendor guidelines

• Global Traffic Management and Internet Bandwidth Management

• Ensure ADIB User PC’s are secured against malware attack, confidential data loss and identity theft. Proactively monitor against any vulnerability in the system, device control usage and whole disk encryption for mobile laptops. Manage Single Sign On profile for Users.

• Participate in POCs in coordination with CSA (Compliance and Security Architecture) and GRM (Governance and Risk Management) Sections to evaluate and to provide a feedback and test reports for selection of the best suitable Security Solution for ADIB IT Security requirements

Security Event Monitoring, Incident Response & Support (10%):

• Antivirus and Data Leakage Prevention Management: Server-side monitoring

• 24/7 Stay on-call for Command Center escalations / alerts and initiate response in case of any Security Incident

• Generating reports and alerts for related platforms for review, configuration fine tuning and improvement purposes

• Incident Response: Earliest-possible detection of the information security incidents, incident containment and resolution

• Incident Support: Provide Level 2 support for any security incident reported by Command Center, or escalate CSA Level 3 personnel for critical high impact incidents as needed

• Resolve and analyze security incidents with the help of the ADIB Service Desk and concerned department as per escalation procedures

Global Expansion (10%):

• To fulfill the IT Security requirements for International expansion as conducted by ADIB Management.

Information Security (10%):

• Maintain information security related to ADIB, throughout the period of employment

• As soon as possible, report any potential or actual risks or incidents affecting the security of information to the ITD Service Desk

Documentation / Process Ownership (10%):

• The incumbent is responsible to take ownership, maintain & update documented processes and / or documentation related to his job function

• In the event where processes or documentation are shared, the incumbent shall coordinate with the owner of document about required changes or improvements

Specialist Skills / Technical Knowledge, Technical Competencies Required for this role:

• Professional Certification: CISSP, CCNA, MacAfee/TrendMicro Antivirus, other Security Certifications

• Must have lead the team in end point security management

• Knowledge of Information Security systems, methodologies and best practices.

• Knowledge of security frameworks such as ISO/IEC 17799-27001, COBIT, etc.

• Strong understanding of general security and networking concepts and experience applying same in corporate network environments

• Self-learner with a passion for IT security and adaptable to changing requirements

• Ability to troubleshoot incidents until root cause resolutions

• Good leadership, team building and mentoring skills.

• Good budgeting and project management skills.

Previous experience:

• Minimum 8 years’ experience in an IT Environment (Systems and/or Endpoint/Networks Security)

• Total Number of Years: Minimum 10