Role overview
About this role
<br /> <p>The Emirates Group is a highly profitable business with a turnover of approximately US$ 12 billion and over 50,000 employees. The Group comprises of dnata, the successful Airport Ground Services and Travel Industry division, and Emirates, the Group's rapidly expanding and award winning international Airline. Emirates global network now sees it flying to over 110 destinations across 6 continents, operating a modern fleet of over 150 wide-bodied aircraft. Today the Airline has orders worth over US$ 68 billion for 200 more of the latest aircraft, with plans to operate to many more destinations in the months and years ahead. Essential to our continued business success as we expand will be the ongoing employment of high quality people to join our multi-cultural team of over 150 nationalities. <br /> <br />Dubai, a tourism centre and modern cosmopolitan city with high standards of healthcare, education and leisure pursuits for residents offers those we hire one of the most desirable lifestyle locations in the world. In addition to lifestyle and tax free salary benefits, the Emirates Group also offers professional development opportunities to help employees develop new skills and grow their careers successfully. Discover your future!<b> <br /> <br /> The Position </b> </p><p>Develop, implement and continuously improve the security verification and assurance program consisting of risk assessments, compliance reviews, vulnerability assessments and penetration tests based on industry best practices and ensure the program is executed on an ongoing basis. <br />Perform investigations relating to suspected breaches of information security policies and standards or security compromise. </p><p>Develop, implement and maintain a comprehensive security risk management framework to effectively manage the information security risks to Emirates Group in accordance with the business requirements and approve governance framework. </p><p>Define and implement an awareness program for all corporate users through creative and effective channels in line with the approved governance frameworks and organisational security plan. On similar lines, define and implement a comprehensive education programme for Emirates Group IT, to encompass software development, infrastructure technologies, project management, governance and operational personnel. <br /> <br />Research, recommend and implement formal methodologies and tools for conducting information security risk assessments, reviews and investigations, and for performing impact analysis. <br /> <br />Monitor and continuously review the Emirates systems on an on-going basis, for the compliance with the Emirates Groups Information Security Policies, Principles and Standards and initiate corrective actions in the event of any violations. <br /> <br />Plan and schedule regular vulnerability assessments, penetration tests, technical risk assessments and compliance reviews on the Groups Key IT infrastructure components and applications based on the criticality and perceived risk of the applications/services. <br /> <br />Ensure all the identified security weaknesses and risks are managed through their life-cycle from identification to resolution to verification and closure through the Information Security Risk Tracking system and provide appropriate visibility of the same to the Management. <br /> <br />Establish procedures for investigating, reporting and responding to information security incidents to ensure effective incident response and resolution. Perform investigations of the security incidents and policy non-compliance issues using appropriate investigations and forensic analysis and report the findings to senior management. <br /> <br />Keep abreast of new exploits, threats and security risks in the industry, the region and Emirates Group and profile Emirates Groups susceptibility to these. Alert the Monitoring team within IT Operations for ensuring continuous monitoring of Emirates network and systems against these, to Security Awareness team to promote awareness and to Technical Security team to action immediate improvements or containment. <br /> <br />Define security metrics, monitoring parameters and reporting requirements for the Security Monitoring team within IT Operations for monitoring, measurement and reporting of security events and current threat status on an on-going basis. <br /> <br />Provide regular summary reports to senior management on the risk status of Emirates IT and the potential and likely impact on The Emirate Group as gathered from assessments, reviews, investigation and risk mitigation validation. <br /> <br /><b> Salary & Benefits </b> </p><p>We offer an attractive tax-free salary, paid in Dirhams, the local currency of the UAE. The Dirham is linked to the Special Drawing Right of the International Monetary Fund. It has been held constant against the US dollar since the end of 1980 at a mid-rate of approximately US$1= Dh3.66. Besides travel benefits normally associated with an airline, more information on employee benefits is available within the 'Working Here' section of this site. By viewing the 'Dubai Lifestyle' section in the site you can also consider the benefits of Dubai as a location to live and work in. <br /> <br /><b> Experience and Qualifications </b> </p><p>* Degree or Honors (12 3 or equivalent) <br />* Security Assurance Management (Applications & Infrastructure) <br />* Specialist in IT Security in the airline industry, of which 3 years in security assurance function preferred. <br />* Technical Specialization (Security) <br />* Information Security <br />* Programming/Systems Development <br />* Database Design <br />* Business Risk Management <br />* An information security related industry recognized certification such as CISSP, CISA, CISM, GIAC <br />certification, CEH etc. <br />* Operating Systems and Systems Software <br />* Web Services <br />* Network Design <br />* Holistic IT Knowledge of Heterogeneous Technology Environments </p><p><b> To Apply </b> </p><p>To express your interest in the above vacancy please apply on-line by clicking below, and complete our application form. We will then consider your application and contact you should we wish to shortlist you for an interview. Should you not receive an invitation for an interview within 5 weeks please assume that on this occasion you have been unsuccessful. We will retain your details for 12 months unless advised otherwise and re-consider you for future opportunities as they arise. Please also note that if you are not shortlisted you can also update your application at anytime and apply for other opportunities. Thank you for your interest in a career with the Emirates Group. </p><p> </p> Please click the Apply now button and search for reference:SSAA/FP/18721