Senior Cyber GRC Analyst: Risk & Compliance Leader

Oman Arab Bank; Muscat; On-site; OMR 30,000 - 50,000; Full time

Job summary

A leading financial institution in Muscat seeks an Information Security professional to develop and maintain security policies, ensuring compliance with industry standards and regulations. The role involves conducting risk assessments, preparing management reports, and implementing security awareness programs. Candidates must have a degree in Information Security or IT, along with relevant certifications. A minimum of 5 years' experience in a similar role is required, along with strong analytical and communication skills.

Qualifications

• 5 to 8 years of relevant experience.

Responsibilities

• Develop, implement, and maintain Information Security policies, standards, and frameworks.
• Ensure adherence to the bank’s security policies and standards.
• Prepare MIS Trackers, Reports, and Dashboards for management.
• Perform Information security risk assessment against industry standards.
• Document and execute the Information Security Awareness Program.
• Develop and report on program execution KPIs.
• Maintain compliance tracking for CBO, SWIFT, and PCI-DSS.
• Report violations to security policies and provide recommendations.
• Log InfoSec related incidents and track for closure.
• Conduct research on latest information security trends.
• Liaise on security events or global threats.

Skills

Leadership Skills

Effective Communication skills

Strong Risk Analysis skills

Attention to Details

Problem-Solving skills

Coordination skills

Teamwork skills

Reporting skills

Research skills

Assessment skills

Sound Arabic & English Languages skills

Education

Degree in Information Security/IT or equivalent

Preferred Professional Information Security Certification or equivalent

ITIL v3 (Information Technology Information Library)

ISO/IEC 2013:27001 Lead Implementer

CEH (Certified Ethical Hacking)

Job description

A leading financial institution in Muscat seeks an Information Security professional to develop and maintain security policies, ensuring compliance with industry standards and regulations. The role involves conducting risk assessments, preparing management reports, and implementing security awareness programs. Candidates must have a degree in Information Security or IT, along with relevant certifications. A minimum of 5 years' experience in a similar role is required, along with strong analytical and communication skills.