Information Security Manager (Omani)

Job Purpose:

To oversee Information Security and Regulatory Compliance within the company, ensuring the protection of systems, data, and digital assets, compliance with regulatory requirements and governance standards, and effective management of cybersecurity and regulatory risks in order to maintain business continuity and protect the interests of the company and its shareholders.

Personal Attributes:

• Access systems and information necessary to perform duties.
• serious security threats.
• Propose security and regulatory policies for senior management approval.
• Request information from various departments for compliance and audit.

Qualifications & Skills:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or a related field.
• Minimum of 5 years of experience in information security, risk management, or related roles.
• Experience in publicly listed companies or public joint stock companies is preferred.

Preferred Professional Certifications:

• CISSP
• CISM
• CISA
• ISO 27001 Lead Implementer
• CRISC
• Compliance certifications such as CAMS or CRCM are an advantage.

Required Skills:

• Strong knowledge of cybersecurity standards and risk management.
• Understanding of governance and regulatory compliance requirements.
• Ability to prepare reports for senior management and the Board.
• Strong leadership and analytical skills.
• Excellent communication skills and ability to work with different departments.

Key Performance Indicators (KPIs):

• Level of compliance with regulatory requirements.
• Number of security incidents detected and resolved.
• Cyber incident response time.
• Internal and external audit results.
• Level of employee awareness in security and compliance.