Cybersecurity and Data Protection Officer

About the role

The Cybersecurity and Data Protection Officer will safeguard Amideast’s information systems, networks, data and digital assets against cyber threats and unauthorized access. The role involves creating security policies, monitoring for vulnerabilities, conducting risk assessments and ensuring compliance with relevant regulations and industry standards.

Key responsibilities

• Develop, implement and enforce security policies, procedures and access controls based on industry best practices.
• Maintain compliance with ISO, NIST and SOC standards and lead certification processes.
• Design and test disaster recovery and incident response plans aligned with regional regulations.
• Monitor networks, servers, firewalls and intrusion detection systems for suspicious activity and conduct regular security assessments.
• Perform penetration testing, vulnerability assessments and oversee remediation of identified gaps.
• Manage data protection measures, including encryption, access controls and privacy compliance (GDPR, HIPAA, etc.).
• Lead security awareness training and phishing simulations for staff.

Required profile

• Bachelor’s degree in Computer Science or related field, preferably with a cybersecurity focus.
• Minimum 5 years of professional experience in cybersecurity.
• Relevant certifications such as CEH, CISSP, CISM, or equivalent.
• Knowledge of regulatory frameworks (GDPR, HIPAA, NIST, ISO 27001) and experience leading compliance initiatives.
• Strong analytical and problem‑solving abilities with a proactive security mindset.

Required skills

• Firewalls, intrusion detection/prevention systems, and anti‑virus solutions.
• Penetration testing and vulnerability assessment tools.
• Data encryption, access control mechanisms, and security monitoring.
• Microsoft Cloud Security Portal for Office 365, Windows and Linux operating systems.
• Network security, endpoint protection, and incident response planning.