Cybersecurity GRC Specialist

شركة نقل المياه Water Transmission Company; Riyadh; On-site; SAR 120,000 - 180,000; Full time

Job summary

Water Transmission Company in Riyadh is seeking a cybersecurity specialist to strengthen our IT security posture and protect critical information assets. You will drive governance, risk management, policy development, and regulatory compliance across WTCO.

Responsibilities include vendor risk assessments, staff training, and implementing resilient cyber strategies to safeguard operations and data integrity within our infrastructure ecosystems.

Qualifications

• 4.01 to 6 years of relevant experience.
• Proficiency in cybersecurity governance, risk management, and compliance.

Responsibilities

• Identify opportunities for continuous improvement, cost optimization, and productivity.
• Ensure compliance with laws, rules, regulations, and standards within WTCO and related functions.
• Escalate problems to ensure timely case closure.
• Apply cybersecurity strategy to safeguard IT operations and data integrity.
• Develop cybersecurity governance framework in line with regulations.
• Implement cybersecurity risk management processes to mitigate risks.
• Develop cybersecurity policies, procedures, and governance systems.
• Raise employee awareness of cyber threats and provide training.
• Ensure third-party and cloud cybersecurity requirements meet WTCO policies.

Skills

Cybersecurity

Education

Bachelor’s Degree in Computer Science, Information Technology, or a relevant field

Job description

• Identify opportunities for continuous improvement, practices, cost optimization, and productivity & efficiency improvement.


• Ensures compliance with all applicable laws, rules, regulations, and standards within WTCO and related functions such as but not limited to (HC, HSSE, Risk, Cybersecurity, etc..).


• Escalate problems to ensure case/issue is closed efficiently and in a timely manner.


• Ensure applying cybersecurity strategy to safeguard and protect all IT operations and assets to ensure the reliability and integrity of data.


• Ensure gathering information related to leading practices to support in the development of cybersecurity governance framework in line with relevant regulations and legislation.


• Ensure implementing cybersecurity risk management process on an ongoing basis to mitigate risks and propose enhancements.


• Develop cybersecurity policies and procedures, and governance framework in line with the relevant regulations and legislation.


• Develop the periodical review on cybersecurity strategy, policies, and related documents to maintain compliance with applicable legislation and regulation.


• Develop cybersecurity requirements are implemented, and that relevant regulations and legislation are adhered to.


• Ensure developing cybersecurity vendor assessment is implemented across WTCO and projects.


• Ensure that cybersecurity risks are managed in a systematic manner aimed at protecting the information and technical assets of WTCO.


• Develop WTCO's cybersecurity compliance requirements, policies and systems, and ensure internal compliance across WTCO's functions.


• Raise employee’s awareness on cyber threats and ensure that they are aware of their cybersecurity responsibilities.


• Provide the employees with the required training in the field of cybersecurity to protect the information and technology assets of WTCO and to fulfill their responsibilities towards cybersecurity.


• Ensure meeting the requirements of cybersecurity resilience in WTCO's business resilience management.


• Ensure the implementation of third-party and cloud computing cybersecurity requirements in accordance with WTCO's policies & procedures, and the relevant regulations and legislation.

Knowledge and Experience

• 4.01 to 6 years of relevant experience.

Education and Certifications

• Bachelor’s Degree in Computer Science, Information Technology, or a relevant field.