Senior IT Security Certification Specialist

Requirements

• A university degree-level qualification in IT, information security or a related field. ideally with a focus on security domains.
• Certification from a recognized Common Criteria certification body and previous experience as a Certifier is desired
• IT Security Overview Training and certification
• Common Criteria for IT Security Evaluation Training and certification
• Minimum 8 years
• Minimum 4 years of work experience as a Senior IT / Information Security / Cyber Security Auditor and/or Risk Management and/or Cyber Security/Information Security Management.
• Proficiency in Arabic and English (spoken and written) is preferred
• Other Required Qualifications:
• Analytical and problem-solving skills
• Proven experience in IT and Information Security Assessment
• Common Criteria for IT Security Evaluation Training
• Experience in Risk Assessment and management.
• Should have hands on experience in information security
• Understanding of ISO27001 certification audit requirements
• Excellent communication, documentation, and report-writing skills.
• In-depth knowledge of security testing methodologies and tools.
• Have analytical & assessment experience of formal schemes and can assess a situation in a fair and objective manner in order to arrive at a firm conclusion.
• Have training, workshops planning and delivery experience across Government & private sector.
• Technical:
• Experience in Risk Assessment and management including audit methodologies and risk assessment methodologies.
• Understanding of NIA controls and implementation requirements
• Proficiency in security frameworks and standards like NIST, ISO27001, NIA.
• Strong awareness of Information Security / Cyber Security trends.
• Behavioural:
• Ability to multitask and work effectively with multiple project teams, sponsors, and customers.
• Ability to pay close attention to detail, meet deadlines and work under pressure.
• Interpersonal skills
• Work autonomously with a high degree of enthusiasm
• Specific:
• Excellent technical report writing skills.
• Have capabilities to understand and interpret the Certification Criteria (ISO/ IEC 17021, ISO/ IEC 17024, ISO/ IEC 27006 and ISO/IEC 17065).
• Knowledge of auditing and information assurance standards like ISA, ITAF, ISO17021, ISO19011.
• Proficiency in security frameworks and standards like, ISO27001, NIA, CSF Q2022.
• Familiarity with third-party audit, Certification and Information Security / Cyber Security audits.
• Proven, hands on, experience in Information Security Audit or Information Security Management.