Cybersecurity GRC Specialist

Water Transmission and Technologies Co.; Riyadh; On-site; SAR 120,000 - 160,000; Full time

Job summary

Water Transmission and Technologies Co. in Riyadh seeks a cybersecurity leader to develop GRC activities, strategy, risk management, and training to protect IT operations and data.

The role involves policy development, governance framework, vendor assessment, awareness, and ongoing compliance with regulations.

Qualifications

• Bachelor's in Computer Science or Information Technology or related field.
• Experience developing cybersecurity governance frameworks and policies.
• Experience implementing cybersecurity risk management processes and training.

Responsibilities

• Develop cybersecurity strategy and requirements to implement GRC activities.
• Ensure compliance with laws, regulations, and internal standards across WTCO.
• Develop cybersecurity policies and governance framework aligned with regulations.
• Lead awareness campaigns and provide cybersecurity training to staff.
• Oversee third-party and cloud cybersecurity requirements per policies.

Skills

Cybersecurity

GRC

Policy development

Security training

Awareness programs

Risk management

Regulatory compliance

Education

Bachelor's in Computer Science / Information Technology

Job description

The job holder is responsible for developing of cybersecurity GRC activities by developing cybersecurity strategy and requirements implementing cybersecurity risk amp compliance mgmt raising awareness on cyber threats and providing cybersecurity training

Key Roles and Responsibilities

Identify opportunities for continuous improvement practices cost optimization and productivity amp efficiency improvement Ensures compliance with all applicable laws rules regulations and standards within WTCO and related functions such as but not limited to HC HSSE Risk Cybersecurity etc Escalate problems to ensure case issue is closed efficiently and in a timely manner Ensure applying cybersecurity strategy to safeguard and protect all IT operations and assets to ensure the reliability and integrity of data Ensure gathering information related to leading practices to support in the development of cybersecurity governance framework in line with relevant regulations and legislation Develop cybersecurity policies and procedures and governance framework in line with the relevant regulations and legislation Develop the periodical review on cybersecurity strategy policies and related documents to maintain compliance with applicable legislation and regulation Develop cybersecurity requirements are implemented and that relevant regulations and legislation are adhered to

Key Roles and Responsibilities 2

Ensure developing cybersecurity vendor assessment is implemented across WTCO and projects Ensure that cybersecurity risks are managed in a systematic manner aimed at protecting the information and technical assets of WTCO Ensure implementing cybersecurity risk management process on an ongoing basis to mitigate risks and propose enhancements Develop WTCO s cybersecurity compliance requirements policies and systems and ensure internal compliance across WTCO s functions Raise employee s awareness on cyber threats and ensure that they are aware of their cybersecurity responsibilities Provide the employees with the required training in the field of cybersecurity to protect the information and technology assets of WTTCO and to fulfill their responsibilities towards cybersecurity Ensure meeting the requirements of cybersecurity resilience in WTCO s business resilience management Ensure the implementation of third-party and cloud computing cybersecurity requirements in accordance with WTCO s policies amp procedures and the relevant regulations and legislation

Key Roles and Responsibilities 3Key Communications

Internal Stakeholders All DepartmentsExternal Stakeholders Consultants Contractors Vendors Suppliers Service providers Government authorities and entities

Education RequirementsBachelor s

Bachelor s in Computer Science or Relevant fields Bachelors in Information Technology or Relevant fields