Senior Risk Management Specialist

confidential government; Saudi Arabia; On-site; SAR 120,000 - 180,000; Full time

Job summary

confidential government is seeking a cybersecurity risk analyst to analyze and assess risks to the IT environment and develop continuous security assessment processes aligned with the Technology Risk Management Framework. The role includes contributing to incident response activities and coordinating with risk management and HR/communications units.

The position requires a minimum of 4 years in a relevant field and a Bachelor’s degree in Cybersecurity or a related field, with a focus on

Qualifications

• Minimum of 4 years of experience in a relevant field.
• Bachelor’s degree in Cybersecurity or related field.

Responsibilities

• Contributes to analyzing and assessing risks to the Information Technology environment.
• Develops continuous security assessment processes for the organization's systems and services in alignment with the Technology Risk Management Framework.
• Participates in cybersecurity incident response activities.
• Establishes monitoring activities for emerging security threats and mitigations with Operational Risk Management.
• Develops processes for reviewing disaster recovery and business continuity plans in coordination with Operational Risk Management.
• Ensures cybersecurity resilience requirements are included in the Business Continuity Plan.
• Reviews information security controls effectiveness and provides recommendations.
• Develops measures to protect assets from cyber risks related to external parties.
• Assesses security awareness of system users and develops awareness programs with relevant units.
• Ensures security awareness programs comply with regulations and standards.

Education

Bachelor’s degree in Cybersecurity or related field

Job description

• Contributes to analyzing and assessing risks to the Information Technology environment.
• Develops continuous security assessment processes for the organization's systems and services in alignment with the Technology Risk Management Framework.
• Contributes to activities related to analyzing and assessing risks to the Information Technology environment.
• Contributes to tasks related to participating in cybersecurity incident response.
• Establishes activities for monitoring emerging security threats and monitoring the implementation of necessary measures to mitigate risks, in coordination and alignment with Operational Risk Management, as applicable.
• Develops processes for reviewing the disaster response and business continuity plan, in coordination and alignment with Operational Risk Management, as applicable.
• Develops activities to ensure the availability of cybersecurity resilience requirements in the Business Continuity Plan.
• Contributes to processes for reviewing the ability of information security controls to mitigate risks and providing recommendations in this regard.
• Develops activities to ensure the protection of information and technology assets from cyber risks related to external parties.
• Develops processes for assessing the security awareness of system users.
• Contributes to activities related to developing plans and implementation programs to enhance security awareness, in coordination with various concerned organizational units (such as: the General Department of Human Resources and the Corporate Communications Department).
• Develops processes for implementing security awareness programs and working to develop them.
• Contributes to ensuring that security awareness programs comply with all relevant regulations, standards, and requirements of the relevant legislative authorities.
• Complies with the organization's policies and work behaviors and the procedures of the organizational unit.
• Performs any other tasks assigned by direct supervisors.

Required Experience

• Minimum of 4 years of experience in a relevant field.

Education

• Bachelor’s degree in Cybersecurity or any related field.