Senior Manager: Information Security

Syria

Telecommunications - IT Software/IT Security - IT Hardware

Not Specified

Core Purpose of The Job:

Responsible for developing and maintaining Information Security agenda, strategy and practice in order to minimize risks, to the level acceptable / set by MTN board / management and in alignment with the Group information security program, at the least impact on costs and schedule, while maintaining the confidentiality, integrity, and availability of MTN’s information, and technology assets.

Tasks:
Prepare and obtain agreement on plans and budgets enabling the Information Security department to make an optimal contribution.
Operate the department within the allocated budgets.
Recruit, motivate and develop staff ensuring that objectives are established and communicated, individual performance is supported, monitored and reviewed, to ensure manpower plans are met.
Manage the establishment and maintenance of organizational Information Security policies, processes and procedures to lay the foundation for a control environment coherent to the risk level acceptable by the organization.
Manage and support the implementation of risk assessments exercises across the organization in order to trap and highlight information security weaknesses and advice on controls to mitigate those risks.
Develop and manage plans for the implementation and operation of authorized information security solutions covering all aspects of information security in order to meet the defined objectives.
Manage information security governance and monitor compliance to Information security policies, procedures and standards via a robust information security program/plan depicting continuous planned and ad-hoc audit and review exercises.
Initiate, facilitate, and promote a focused information security programs to create and maintain adequate information security awareness and encapsulate such within all organizational activities.
Manage escalating issues (within the information security domain) along with relevant stakeholders.
Interface with other organizational units, when needed.
Manage change management requests (within the information security domain) in Change Advisory Board (CAB) to ensure adequate resolution.
Conduct knowledge transfer sessions for information security department members.
Serve as an internal information security consultant to MTN and advise the organization with trending information security technologies/related regulatory issues.
Coordinate the activities of the Information Security Committee.
Ensure adequate compliance to the information security requirements of MTN, suggestions for change.

Knowledge:

Project Management Professional (PMP)
Certified Information System Auditor (CISA)
Information Security Certifications, such as CISSP, CISA, CISM or ISO 27001 Lead Auditor.
Information security concepts in the IT and Network (GSM) domains.
Information security compliance techniques.
Standards and leading practices within the information security.
Information security architecture and detailed components.
Risk based auditing and risk methodologies.
Operating Systems (Windows 2000/XP/Vista, UNIX, Linux, Mac OSX...etc.)
Client (Server/Networking/Hardware, CISCO Routers, WAN[Wide Area Networks], TCP/IP, Apache Web Server, Active Directory, Microsoft Exchange Server, Microsoft SQL Server, Oracle Database Server, Checkpoint Firewall, Novell Console One)
Word Processing (Microsoft Word)
Other Microsoft Products (Project Management, SharePoint, Visio, Outlook…etc.)

MTN Syria is the leading provider of mobile services, offering cellular network access and business solutions.

In 2007, the new MTN brand was launched in Syria, and thus, introducing a new era of telecommunications in the country.

MTN Syria is part of MTN Group which has launched in 1994, MTN Group is a multinational telecommunications group, operating in 22 countries in Africa and the Middle East.
At the end of December 2014, MTN recorded more than 223.3 million subscribers across its operations.

May 21, 2017

Required