IT Security Specialist

IT Security Specialist

OMT Head Office Badaro - Beirut

Responsible for safeguarding the organization's ICT infrastructure by implementing and managing security measures, monitoring for potential threats, and responding to incidents. Additionally, conducts regular security assessments, develops and enforces security policies, and ensures compliance with regulatory requirements to protect sensitive data and maintain the integrity of systems.

Risk Assessment

• Conducts regular risk and vulnerability assessments to identify potential threats and weaknesses

• Performs threat modeling and risk analysis

• Develops and implements risk mitigation strategies and remediation plans

Incident Response and Management

• Responds to security incident alerts, conducts investigations, and implements remediation actions

• Collaborates with the SOC team to ensure swift and effective resolution of incidents and mitigation of threats

• Develops, tests, and refines incident response plans while coordinating with internal teams and external partners

• Analyses security incidents to determine root causes and recommends improvements to prevent recurrence

• Utilizes the kill chain model to identify and disrupt cyber-attacks at each stage, from reconnaissance to command and control

• Ensures proper chain-of-custody procedures are followed for cybersecurity incidents and evidence handling

• Manages and coordinates on-site and remote interventions, swiftly addressing and resolving critical, urgent issues that arise, including those outside normal business hours

Security Monitoring and Analysis

• Oversees the continuous monitoring of security logs from diverse sources (WAF, Network, Systems, DBs, IPS, EDR, Monitoring & Vulnerability Assessment tools, Proxy) to detect and investigate unusual patterns or potential security threats

• Develops and implements strategies for effective log management and monitoring, ensuring critical security events are promptly identified and addressed

Compliance and Audits

• Ensures compliance with external regulations/standards and internal security policies

• Prepares for and facilitates security audits and assessments by external regulatory bodies

• Maintains documentation and evidence required for compliance and audit purposes

• Performs gap analysis and remediation steps for compliancy gaps

Continuous Improvement

• Works closely with ICT, development teams, and other departments to integrate security practices into projects and solutions

• Develops, delivers trainings and awareness sessions to staff on security best practices, policies and procedures

• Stays updated with the latest security trends, threats, and technologies relevant to the fintech industry

• Evaluates and recommends new security technologies and tools to enhance the company's security posture

Qualifications:

• Bachelor's degree in Computer Science, Computer Information Systems, Information Security, Computer & Communication Engineering or any related field

• Relevant certifications such as CISSP, CISM are highly preferable

Technical Skills:

• Proficiency in security technologies including Firewalls, IDS/IPS, EDR, XDR, SIEM, encryption technologies and WAF

• Experience with monitoring tools, packet analysis, and vulnerability assessment techniques

• Strong understanding of security and control frameworks, such as NIST, ISO, CIS, PCI, GDPR, COBIT, ITIL

• Skills in network monitoring and packet analysis tools

• Expertise in administering vulnerability assessment tools, patch management systems, firewalls, intrusion prevention systems, email security

• Skills in deploying and managing data encryption practices, including data-at-rest encryption (e.g., file system encryption, database encryption) and data-in-transit encryption (e.g. TLS, IPsec) to ensure robust data protection

• Deep expertise in designing and implementing security architectures, including network segmentation, secure network design, and firewall policies, to create robust defenses against potential threats

• Extensive experience with network protocols and their associated vulnerabilities, with the ability to apply advanced network security measures to protect against exploitation

• In-depth knowledge of encryption algorithms and protocols (e.g., AES, RSA, TLS, IPsec), with hands-on experience in implementing data encryption for both data-at-rest and data-in-transit to ensure compliance and protect sensitive information

• Proficiency in managing and integrating IAM solutions, including implementing SSO, MFA, and PAM to enforce stringent access controls

• Strong understanding of security best practices in software development, with hands-on experience in integrating security measures throughout the development lifecycle

• Experience with cloud security and related technologies (e.g., AWS, Azure)

• Familiarity with programming or scripting languages, code review capabilities

• Experience with security of financial systems, payment gateways, or other fintech-specific applications

Relevant Experience:

• 4-6 years of relevant experience in information security, preferably with a focus on fintech or financial services

Key Behavioral Competencies

• Strong problem-solving skills with the ability to analyse complex security issues and provide effective solutions

• Attention to detail, well organized with the ability to work under pressure

• Excellent written and verbal communication skills, with the ability to articulate security concepts to non-technical stakeholders

• Proven ability to work collaboratively with cross-functional teams and external partners