Responsibilities
- Develop and implement the organization’s Information Security Strategy, Framework, and Roadmap.
- Ensure compliance with Central Bank of Jordan (CBJ) cybersecurity and information security requirements.
- Lead cybersecurity risk assessments, maintain risk registers, and oversee mitigation plans.
- Establish and maintain security policies, standards, procedures, and controls.
- Oversee Security Operations Center (SOC) activities, including monitoring, incident detection, response, and reporting.
- Manage internal and external Penetration Testing (PT) and Vulnerability Assessments (VA), including remediation tracking.
-
Drive implementation and continuous improvement of:
-
ISO 27001 Information Security Management System (ISMS)
-
ISO 27701 Privacy Information Management System (PIMS)
-
ISO 22301 Business Continuity Management System (BCMS)
-
- Align cybersecurity practices with the NIST Cybersecurity Framework (CSF) and CIS Critical Security Controls.
- Oversee Business Continuity and Disaster Recovery (BCP/DRP) planning, testing, and maintenance.
- Manage third-party security risks and ensure vendors comply with information security, privacy, and regulatory requirements.
- Review and validate contracts and Service Level Agreements (SLAs) to ensure alignment with cybersecurity standards.
- Provide regular cybersecurity and risk reporting to senior management and relevant committees.
Qualifications
- Bachelor’s degree in information security, Cybersecurity, Computer Science, Information Technology, or a related field.
- Minimum 8 years of experience in Information Technology, with at least 4 years in Information Security or Cybersecurity roles.
- Professional certification is mandatory, such as:
-
Certified Information Security Manager (CISM)
-
ISO 27001 Lead Implementer
-
- Strong knowledge of cybersecurity governance, risk management, and regulatory compliance frameworks.
- Hands-on experience implementing and maintaining ISO 27001, ISO 27701, and ISO 22301 standards.
- Practical understanding of NIST CSF and CIS Controls.
- Experience managing SOC operations, incident response, vulnerability management, and threat monitoring.
- Familiarity with banking systems, data protection laws, and financial-sector cybersecurity regulations.
- Excellent analytical, communication, leadership, and stakeholder management skills.
المهارات المطلوبة
- Cybersecurity
تفاصيل الوظيفة
- الموقع عمان - الأردن
- القطاع تكنولوجيا المعلومات والاتصالات
- نوع الوظيفة دوام كامل
- الدرجة العلمية بكالوريوس
- الخبرات 8+
- الجنسية غير محدد
وظائف مماثلة
Confidential
الأردنConfidential المزيد