Information Security Professional

The Information Security Professional is responsible for overseeing day-to-day security controls, reviews and analyses the security incidents and vulnerability reports produced by the dedicated SOC and Vulnerability Assessment (VA) teams, makes sure every risk has an owner and is closed, and produces the evidence that shows ZainTECH is secure and compliant.This role provides the CISO Office review and analysis of their output and drives follow-up actions to closure.

Responsibilities:

Security Incident Review and Analysis

• Review incident reports and tickets raised by the SOC, ensuring appropriate classification, severity assessment, and handling in accordance with incident response policies and playbooks.
• Assess business impact, affected assets and data, and root causes, escalating significant incidents to the Senior Information Security Professional and CISO.
• Coordinate with IT Operations and system owners to follow up on agreed