System Risk Control Analyst

About the role

Careers International is looking for an experienced System Risk Control Specialist to join its Information Security team in Dubai. The role covers information security planning, security management processes, system design and implementation, security assessments and vulnerability mitigation, and leads the security team.

Key responsibilities

• Develop and maintain information security strategies and policies, and set up and oversee security management processes
• Design and implement security systems that protect information assets
• Carry out security assessments of systems, networks and servers, and work with teams to implement recommended solutions
• Monitor security trends and vulnerabilities, assess risks and submit detailed risk reports
• Perform penetration testing, develop alarm and trace analysis protocols, and implement breach prevention and response measures
• Lead the information security team, plan and guide personnel, provide training and maintain team documentation

Required profile

• Major in system security or computer applications, with more than 3 years of system security experience
• Familiarity with Linux and Windows operating systems, web application servers and related security policies
• Strong interest in vulnerability discovery and knowledge of common web vulnerabilities such as SQL injection and XSS
• Proven expertise in security assessment, vulnerability management and penetration testing
• Strong Chinese and English

Required skills

• Mainstream security tools and technologies such as IDS/IPS
• Web security attack and defense, and system penetration testing
• Policy formulation and incident handling