Information Security Manager
Sobha Group
Total years of experience :20 years, 7 Months
Sobha Middle East - Sobha Group is a multinational, multiproduct group with significant developments and investments in U.A.E., Sultanate of Oman, Qatar, Bahrain, Brunei, Tanzania and India with business areas in Real Estate Development, Architectural / Engineering Consultancy, Interiors/Joinery, Civil Contracting, Electrical and Mechanical Building Services & Education etc.
• Responsible for group IT functions, Infrastructure & Security includes Schools, HO in Dubai & offices in Dubai, Abu Dhabi, & Sharjah as well as more than 20 project sites.
• Mapping business requirements & functional requirements into Information Systems Solutions, solution design, design activities, implementation and research/explore to choosing the right solution for new requirements (Infrastructure & Security, Cloud, data Privacy & compliance).
• Lead IT infrastructure and IT security project worth AED 10 Million for Schools in UAE and Singapore, within the budget & time frame, solutions used (Cisco, Cisco Meraki, MS Azure).
• Drive Information Security/ Risk Management Programs strategy to execution in align with the organizational goals, objectives and compliance requirements to ensure that information assets are adequately protected (ISO 27001, NIST & COBIT). Periodic measurement & reporting.
• Reduced annual IT operational cost 30% by migrating on premise servers & applications to Azure (considering cost benefit analysis, business continuity, disaster recovery and risk factors).
• Provide technical expertise for infrastructure & Security (AAA, Virtualization, application/ database & cloud computing etc.).
• Evaluate current state of the security architecture comparing with known benchmarks and define the road map to achieve the desired state.
• Develop and oversee disaster recovery policies & standards to align with enterprise business continuity management program goals. Coordinate for test, implementation of the plans to ensure that business-critical services are recovered in the event of a security incident.
• Implement security controls to protect CIA triad and monitor the effectiveness.
• Ensure optimized SIEM Solution and its integration with the organizational Infrastructure.
• Monitor security incidents, change management, encryptions, user access rights and privileges.
• Facilitate internal/third party IT audits, penetration testing, threat & vulnerability management, identify risk tolerances & recommend treatment plan.
• Manage outsourced vendors & SLA that provide information security functions.
• Create and manage information security and risk management awareness training programs
Manage & maintenance of all aspects of IT infrastructure. Include Routing/Switching
infrastructure, Firewall, Virtual platforms, Wireless & Telephony.
* Evaluating new security technologies, solutions, recommendation and creating detailed
documentations.
* Handling incident response and reporting of breach of IT / IS Security and drive for appropriate
changes.
* Configuration and management of Cisco routers, switches, firewall, CCM, wireless and voice
gateways, Site-to-Site VPN, MPLS/ leased lines.
* Design, implementation and support of the core network (Spanning tree re-design, Trunking,
complex VLAN and routing setup)
* Monitor key infrastructure services to improve resilience and scalability (IP SLA, PRTG, MRTG,
Wireshark, & OpManager).
* Change management/ configuration management, Maintenance of Vendor Contracts & SLAs.
Landmark Properties LLC is a joint venture of Development PJSC and Amlak Finance PJSC is one of the leading real estate brokerage firms and consultancy providers in the UAE with annual sales & lease transactions of AED 10 billion top tier of Gulf real estate companies.
* Design, Implement, support local and remote portions of the network within the organization,
introduced new systems/ equipment, assured updates and maintenance are performed on
current systems.
* Troubleshoot network performance issues Voice/Data and extended technical support/
guidance to users, to ensure maximum performance and availability for users.
* Direct the preparation and implementation of security policies, procedures and standards.
* Managing Cisco CUCM/CUCME, IOS voice gateways MGCP, H.323, STRS futures and Cisco Unity,
Unity Express, Cisco IP Soft Phone, Cisco IP Phones, for central and hub sites. Configuring
unified user/devise futures (Device Mobility, Extension Mobility, and Cisco Unified Mobility).
* Configuring & managing Cisco equipment's, core network routing, switching, firewall, VPN and
wireless.
* Monitoring Cisco IOS IDS/IPS and Cisco ASA security logs and recommending security policies.
* Administration of Exchange 2003/2007 CCR, NLB Cluster and managing/ fine tuning spam
firewall.
* Developing and recommending strategies for network growth, security, and other network
enhancements by maximizing functionality of Routers, Switches, and Firewalls.
* Identifying current and emerging technology issues including security trends, vulnerabilities
and threats.
* Conducting proactive research/ Vulnerability Assessment to analyses security weaknesses and
recommend appropriate strategies.
* Security Incident Management and Risk/Threat Management and remediation.
Eureka Online is the leading ISP offering IT infrastructure, IT security & MIS services.
* Developing relationship with clients in proposing optimized network solutions using best
practice and emergent technologies as well as total network infrastructure design and
implementation for corporate clients and document detailed project plan.
* Support clients in different industries Banking, Insurance, Hospitality and Retail.
* Provides pre-sales technical subject matter expertise in creating a recommended architecture
and implementation of solutions that meets client requirements.
* Estimate cost, and prepare business cases for IT solutions, considering infrastructure and IT
security.
* Reviewing the Security Architecture and mechanisms, and recommending cost-effective
changes to the existing structure.
* Configuration and management of Cisco Routing & Switching, Firewalls. IDS/IPS, Data Centers,
Mobility, Active and Passive Infrastructure, Wireless Network.
* Design & implementation of Security solutions for IT infrastructure & Services.
* Configured leased circuits and VPN using various technologies (WAN:ATM, Frame-Relay, DSL,
ISDN BRI, ISDN PRI, T1/E1, IP Sec, IP MPLS and GPON), (LAN:VTP, STP, VLAN, NAT/ PAT, DHCP)
* Configuration and management of Win 2000/2003/2008 Active Directory/DNS domain multisite configuration.
* Exchange 2000/2003 and high availability using Hardware RAID, NLB, Failover clusters and
Mirrored servers.
* Vulnerability assessment, penetration testing and fixing issues using various tools.
* Configuration and management of AD, DHCP, DNS File APC UPS and MFP printers.
* Manage high availability using Hardware RAID and mirrored servers, Backup Restore files and
system state data.
* Install and configure routers and switches and monitor the clients Network infrastructure.
* Diagnose and resolve issues related to the Active Directory database/ operations master role
failures/ AD replication.
* Periodically checking & updating for Service packs & Patches for Servers & clients and configure
user security settings and Distribute software by using Group Policy.
* Administration / Maintain ADSL, Leased circuits and maintain, monitor, upgrade E-MAIL /
Internet Performance.
* Set up email clients, servers for workgroup access/simple file share and create user account.
* Installation of hardware, software, client and server OS.