Cybersecurity Risk and Compliance Analyst

Aujas Cybersecurity; Jeddah, Makkah Al Mukarramah; On-site; SAR 150,000 - 200,000; Full time

Job summary

A leading cybersecurity firm seeks experienced candidates for risk management in Jeddah. You'll identify and mitigate risks, ensuring compliance with Saudi regulations. Ideal candidates should have a strong technical background and relevant certifications, contributing to the firm's cybersecurity framework.

Qualifications

• 5-7 years of relevant experience in cybersecurity risk management.
• Familiarity with NCA ECC, ISO 27001:2022, NIST standards.
• Preferred certifications: CISA, CISM.

Responsibilities

• Identify and prioritize cybersecurity risks, aligning with business objectives.
• Conduct periodic risk assessments and recommend mitigation strategies.
• Liaise with auditors to ensure compliance with standards.

Skills

Analytical skills

Problem-solving

Communication

Interpersonal skills

Education

Bachelor’s degree in Cybersecurity

Bachelor’s degree in Computer Science

Bachelor’s degree in Information Technology

Job description

• Looking for candidates having Saudi Nationality only.
• Experience:5-7years

• Key Responsibilities:

• Identify, assess, and prioritize cybersecurity risks, aligning mitigation measures with business objectives
• Develop and maintain a comprehensive risk management framework, including policies, standards, and risk registers
• Conduct periodic risk assessments to identify vulnerabilities and recommend mitigation strategies
• Monitor and report on the effectiveness of risk mitigation measures, recommending enhancements
• Collaborate with stakeholders to ensure thorough understanding and mitigation of cybersecurity risks
• Stay informed on emerging threats and best practices to keep risk strategies current
• Liaise with auditors and regulators to ensure compliance with NCA ECC and other standards
• Preferred Skills and Competencies:

• Strong technical background in cybersecurity with in-depth knowledge of risk management methodologies
• Familiarity with NCA ECC, ISO 27001:2022, NIST CSF, NIST 800-53 and Saudi Arabia’s cybersecurity regulations
• Excellent analytical, problem-solving, and critical thinking skills for risk assessment
• Strong communication and interpersonal skills to collaborate with stakeholders at all levels
• Ability to work independently, manage multiple priorities, and maintain attention to detail
• Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field
• 5-6 years of relevant experience in cybersecurity risk management
• Preferred professional certification such as CISA, CISM