Cyber Security Consultant

Summary:

The Cyber Security Consultant will provide expert advice and guidance on all aspects of cybersecurity governance, risk management, and compliance. This is a consultative role requiring a deep understanding of industry best practices, regulatory requirements, and emerging threats. The consultant will work closely with various stakeholders to ensure that the company's cybersecurity program is robust, effective, and compliant.

Duties and Responsibilities:

• Provide expert guidance on interpreting and implementing the SAMA Cyber Security Framework. Conduct gap analyses and develop remediation plans to ensure full compliance.
• Assist in developing, implementing, and maintaining a comprehensive cybersecurity GRC framework, including policies, standards, procedures, and guidelines.
• Conduct comprehensive risk assessments, identify vulnerabilities, and develop mitigation strategies to address cybersecurity threats.
• Develop and deliver cybersecurity awareness training programs to educate employees on best practices and company policies.
• Assist in developing and testing incident response plans to ensure effective handling of security breaches.
• Assess and manage cybersecurity risks associated with third-party vendors and partners.
• Stay abreast of the latest cybersecurity threats, vulnerabilities, and regulatory changes. Recommend improvements to the company's security posture.

Minimum Requirements:

• Minimum of 5 years of experience in a cybersecurity GRC role, preferably in the financial services industry.
• In-depth knowledge of IA and SAMA regulations and the SAMA Cyber Security Framework.
• Strong understanding of cybersecurity frameworks such as NIST, ISO 27001, and COBIT.
• Experience in conducting risk assessments, developing security policies, and implementing security controls.
• Excellent communication, interpersonal, and presentation skills.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Relevant certifications such as CISM, CISA, CISSP, or CRISC are highly desirable.