Senior Information Security Specialist

Tweeq; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading financial services provider in Saudi Arabia is seeking an experienced Information Security professional to safeguard information assets and ensure compliance with SAMA guidelines. The role involves risk management, overseeing security operations, and developing security policies. The ideal candidate should have a strong background in information security, good knowledge of SAMA requirements, and experience with GRC tools. This position requires excellent analytical skills and the ability to communicate effectively across teams.

Qualifications

• Experience managing information security programs and compliance.
• Familiarity with SAMA guidelines.
• Effective incident response and reporting capabilities.

Responsibilities

• Ensure adherence to SAMA requirements and standards.
• Conduct risk assessments and vulnerability analyses.
• Oversee security operations and incident management.

Skills

Proven experience in information security

Strong knowledge of SAMA requirements

Experience with GRC tools like Archer and Cyber Arrow

Strong analytical and problem-solving skills

Excellent communication and interpersonal skills

Ability to work in a fast-paced, dynamic environment

Passionate about learning and career development

Tools

Archer

Cyber Arrow

Job description

Department: InfoSec GRC

Location: KSA

Description

Reporting directly to the Head of Information Security, you will play a pivotal role in safeguarding Tweeq's information assets, managing risks, and driving the implementation of robust security frameworks in compliance with SAMA's guidelines.

Key Responsibilities

Compliance and Governance:

• Ensure adherence to SAMA requirements and standards.
• Develop, implement, and maintain information security policies, procedures, and guidelines.
• Monitor compliance with internal security policies and external regulatory requirements.

Risk Management:

• Conduct risk assessments and vulnerability analyses to identify and mitigate security threats.
• Develop and implement risk management strategies and controls.
• Monitor and report on the effectiveness of security measures.

Security Operations:

• Oversee the implementation and management of security tools and technologies.
• Coordinate with IT and other departments to ensure robust security measures are in place.
• Manage incident response and investigation processes.

Training and Awareness:

• Develop and deliver security awareness training programs.
• Promote a culture of security awareness within the organization.

Project Involvement:

• Participate in projects, including the onboarding and implementation of new systems, such as GRC tools.
• Attend workshops and contribute to the integration of security requirements into new projects.

Reporting and Documentation:

• Prepare regular reports on the status of information security programs.
• Maintain documentation related to security policies, procedures, and incidents.

Skills, Knowledge & Expertise

• Proven experience in information security.
• Strong knowledge of SAMA requirements and standards.
• Experience with governance, risk management, and compliance (GRC) tools such as Archer and Cyber Arrow is preferred.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work in a fast-paced, dynamic environment.
• Passionate about learning and career development.