Cybersecurity GRC Specialist

Water Transmission Company; Riyadh; On-site; SAR 90,000 - 150,000; Full time

Job summary

Water Transmission and Technologies Company in Riyadh – HQ is seeking a Cybersecurity GRC Specialist to lead strategy, risk, and compliance initiatives. The role focuses on developing cybersecurity governance and training to strengthen defense across IT assets.

You will develop policies and procedures, ensure regulatory alignment, and drive continuous improvement in security controls, awareness, and incident readiness within WTCO.

Qualifications

• Bachelor’s in Computer Science or relevant fields.
• Bachelor’s in Information Technology or relevant fields.
• Experience in cybersecurity governance and risk management.

Responsibilities

• Identify opportunities for continuous improvement, practices, cost optimization, and productivity & efficiency improvement.
• Ensure compliance with all applicable laws, rules, regulations, and standards within WTCO and related functions such as but not limited to (HC, HSSE, Risk, Cybersecurity, etc..).
• Escalate problems to ensure case/issue is closed efficiently and in a timely manner.
• Ensure applying cybersecurity strategy to safeguard and protect all IT operations and assets to ensure the reliability and integrity of data.
• Ensure gathering information related to leading practices to support in the development of cybersecurity governance framework in line with relevant regulations and legislation.
• Develop cybersecurity policies and procedures, and governance framework in line with the relevant regulations and legislation.
• Develop the periodical review on cybersecurity strategy, policies, and related documents to maintain compliance with applicable legislation and regulation.
• Develop cybersecurity requirements are implemented, and that relevant regulations and legislation are adhered to.
• Ensure developing cybersecurity vendor assessment is implemented across WTCO and projects.
• Ensure that cybersecurity risks are managed in a systematic manner aimed at protecting the information and technical assets of WTCO.
• Ensure implementing cybersecurity risk management process on an ongoing basis to mitigate risks and propose enhancements.
• Develop WTCO's cybersecurity compliance requirements, policies and systems, and ensure internal compliance across WTCO's functions.
• Raise employee’s awareness on cyber threats and ensure that they are aware of their cybersecurity responsibilities.
• Provide the employees with the required training in the field of cybersecurity to protect the information and technology assets of WTTCO and to fulfill their responsibilities towards cybersecurity.
• Ensure meeting the requirements of cybersecurity resilience in WTCO's business resilience management.
• Ensure the implementation of third-party and cloud computing cybersecurity requirements in accordance with WTCO's policies & procedures, and the relevant regulations and legislation.

Skills

Cybersecurity governance

Risk management

Compliance

Security training

Education

Bachelor’s in Computer Science

Bachelor’s in Information Technology

Job description

Select how often (in days) to receive an alert:

Water Transmission and Technologies Company

Riyadh - HQ

Cybersecurity GRC Specialist

90000029

Job Purpose

The job holder is responsible for developing of cybersecurity GRC activities by developing cybersecurity strategy and requirements, implementing cybersecurity risk & compliance mgmt., raising awareness on cyber threats, and providing cybersecurity training.

Key Roles and Responsibilities

• Identify opportunities for continuous improvement, practices, cost optimization, and productivity & efficiency improvement.
• Ensures compliance with all applicable laws, rules, regulations, and standards within WTCO and related functions such as but not limited to (HC, HSSE, Risk, Cybersecurity, etc..).
• Escalate problems to ensure case/issue is closed efficiently and in a timely manner.
• Ensure applying cybersecurity strategy to safeguard and protect all IT operations and assets to ensure the reliability and integrity of data.
• Ensure gathering information related to leading practices to support in the development of cybersecurity governance framework in line with relevant regulations and legislation.
• Develop cybersecurity policies and procedures, and governance framework in line with the relevant regulations and legislation.
• Develop the periodical review on cybersecurity strategy, policies, and related documents to maintain compliance with applicable legislation and regulation.
• Develop cybersecurity requirements are implemented, and that relevant regulations and legislation are adhered to.

Key Roles and Responsibilities 2

• Ensure developing cybersecurity vendor assessment is implemented across WTCO and projects.
• Ensure that cybersecurity risks are managed in a systematic manner aimed at protecting the information and technical assets of WTCO.
• Ensure implementing cybersecurity risk management process on an ongoing basis to mitigate risks and propose enhancements.
• Develop WTCO's cybersecurity compliance requirements, policies and systems, and ensure internal compliance across WTCO's functions.
• Raise employee’s awareness on cyber threats and ensure that they are aware of their cybersecurity responsibilities.
• Provide the employees with the required training in the field of cybersecurity to protect the information and technology assets of WTTCO and to fulfill their responsibilities towards cybersecurity.
• Ensure meeting the requirements of cybersecurity resilience in WTCO's business resilience management.
• Ensure the implementation of third-party and cloud computing cybersecurity requirements in accordance with WTCO's policies & procedures, and the relevant regulations and legislation.

Key Roles and Responsibilities 3

Education Requirements

Bachelor’s in Computer Science or Relevant fields

Bachelors in Information Technology or Relevant fields

Key Communications

Internal Stakeholders

• All Departments

External Stakeholders

• Consultants/Contractors
• Government authorities and entities

Disclaimer

The above job description is meant to describe the general nature and level of work being performed; it is not intended to be constructed as an exhaustive list of all responsibilities, duties, and skills required for the position. Accordingly, there is no way this Job Description states or implies that these are the only duties to be performed by the employee in this position. Employees will be required to follow any other job-related instructions and to perform other job-related duties.