Business Protection Manager

Specialized Technical Services; Saudi Arabia; On-site; SAR 120,000 - 150,000; Full time

Job summary

A cybersecurity services provider in Saudi Arabia is looking for a professional to design and manage cybersecurity audits. The role involves maintaining audit toolkits, preparing reports, and tracking mitigation actions in compliance with industry standards. Ideal candidates will have experience in cybersecurity auditing, risk analysis, and an understanding of compliance processes.

Qualifications

• Experience in cybersecurity auditing and compliance.
• Proven ability to manage and perform risk analysis.
• Strong knowledge of industry best practices in cyber defense.

Responsibilities

• Maintain a deployable cyber defense audit toolkit based on industry best practices.
• Prepare cybersecurity assessment and audit reports.
• Track audit findings and ensure remediation actions are taken.

Job description

Our Culture

At Zaintech we are proud of our culture and how it drives everything we do. We are looking for individuals who share our values and want to be part of a unique and engaging culture that revolves around collaboration and innovation. If you are looking for a role where you can drive engagement and excellence across teams through commitment and collaboration, and are someone who is customer-centric and appreciates an organization with uncompromised integrity that focuses on employee engagement then read on to learn more about how you can become part of the Zaintech family.

Our Code of Conduct

At Zaintech we strictly adhere to our code of conduct, which is there to serve as a moral compass, offering a framework for responsible behaviours and enabling ethical choices that cultivate positive relationships and a better future. It also outlines policies, standards, and procedures for our global operations, promoting integrity and ethical excellence across the countries we engage with.

Every year, all employees are required to review, comprehend, confirm, and adhere to the code of conduct. Additionally, all newly hired employees are subject to the same as part of their onboarding process.

Role Summary

Designs, performs and manages cybersecurity audits to assess an organization’s compliance with applicable requirements, policies, standards and controls. Prepares audit reports and communicates them to authorized parties.

Duties and Responsibilities

• Maintain a deployable cyber defense audit toolkit based on industry best practice to support cyber defense audits.
• Perform system administration on specialized cybersecurity applications and systems.
• Perform risk analysis whenever an application or system undergoes a major change.
• Prepare cybersecurity assessment and audit reports that identify technical and procedural findings, and include recommended remediation strategies and solutions.
• Track audit findings and recommendations to ensure that appropriate mitigation actions are taken.
• Effectively manage vulnerability remediation.
• Ensure an audit log of evidence of security measures is maintained.
• Review, conduct, or participate in audits of cyber programs and projects.
• Maintain knowledge of applicable cybersecurity defense policies, regulations and compliance documents as they pertain to cybersecurity defense auditing.
• Carry out an audit of application software/network/system security against documented cybersecurity policies and provide recommendations for remediation where gaps appear.
• Develop cybersecurity compliance processes and audits for services provided by third parties.
• Regularly review and ensure that cybersecurity policies and related documentation are aligned with the organization's stated business objectives and strategy.
• Ensure that security design and cybersecurity development activities are appropriately documented.
• Ensure that cybersecurity audits test all relevant aspects of the organization's infrastructure and policy compliance.
• Develop processes with any external auditors on information sharing in a secure manner.