Risk Management Expert

Confidential Government; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Confidential Government is seeking an experienced information security professional in Saudi Arabia to advise on risk analysis and cyber risk management. The role supports continuous security assessments, incident response initiatives, and alignment with disaster recovery and business continuity plans.

The ideal candidate will have a minimum of six years in a relevant field and a Bachelor’s degree in Cybersecurity or a related discipline, with strong skills in risk analysis, incident response,

Qualifications

• Minimum of 6 years of experience in a relevant field.
• Bachelor’s degree in Cybersecurity or related field.
• Strong understanding of risk analysis and incident response processes.

Responsibilities

• Advise on analyzing and assessing risks to the IT environment.
• Recommend activities for continuous security assessments and monitoring of threats.
• Participate in cybersecurity incident response efforts and planning.
• Review disaster recovery and business continuity plans in line with risk management.
• Identify tasks to ensure security controls mitigate risks and protect assets.
• Develop security awareness programs and coordinate with HR and Communications.
• Ensure security awareness programs comply with regulations and standards.
• Adhere to organizational policies and directives; perform other tasks as assigned.

Skills

Risk analysis

Cybersecurity

Incident response

Security governance

Education

Bachelor’s degree in Cybersecurity

Job description

• Provides advice on analyzing and assessing risks to the Information Technology environment.
• Recommends activities related to continuous security assessments of the organization's systems and services in alignment with the Technology Risk Management Framework.
• Recommends activities related to analyzing and assessing risks to the Information Technology environment.
• Provides advice on participating in cybersecurity incident response.
• Recommends actions related to monitoring emerging security threats and monitoring the implementation of necessary measures to mitigate risks, in coordination and alignment with Operational Risk Management, as applicable.
• Reviews the disaster response and business continuity plan, in coordination and alignment with Operational Risk Management, as applicable.
• Recommends actions to ensure the availability of cybersecurity resilience requirements in the Business Continuity Plan.
• Identifies tasks related to the ability of information security controls to mitigate risks and provides recommendations in this regard.
• Recommends actions to ensure the protection of information and technology assets from cyber risks related to external parties.
• Reviews the processes for assessing the security awareness of system users.
• Proposes activities for developing plans and implementation programs to enhance security awareness, in coordination with various concerned organizational units (such as: the General Department of Human Resources and the Corporate Communications Department).
• Proposes activities for implementing security awareness programs and working to develop them.
• Recommends actions to ensure that security awareness programs comply with all relevant regulations, standards, and requirements of the relevant legislative authorities.
• Complies with the organization's policies and work behaviors and the procedures of the organizational unit.
• Performs any other tasks assigned by direct supervisors.

Required Experience

• Minimum of 6 years of experience in a relevant field.

Education

• Bachelor’s degree in Cybersecurity or any related field.