Information Security Senior Specialist

Forum International Management Consulting; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A consulting firm is looking for an experienced Information Security professional in Riyadh to support the implementation of security measures and compliance with regulatory requirements. The ideal candidate should have at least 5 years of experience in the finance industry, excellent communication skills, and relevant certifications such as CISM or CISSP. This role involves close collaboration with regional CISO functions and participation in local projects to ensure security practices are established from the outset.

Qualifications

• Minimum 5 years of Information Security experience in the Saudi Arabian finance industry.
• Strong knowledge of local regulatory requirements.
• Experience in financial services organizations in Saudi Arabia.

Responsibilities

• Support CISO and Regional CISO in implementing Information Security strategy.
• Ensure implementation of IS processes and identify gaps.
• Monitor local regulatory environment and ensure compliance.
• Develop and maintain local Information Security policies.
• Ensure Information Security involvement in local projects from the start.

Skills

Information Security expertise

Regulatory knowledge in Saudi Arabia

Communication skills

Organizational skills

Independent working style

Education

Bachelor Degree in Computer Science/Information Technology

CISM or CISSP certification

Job description

Location: Riyadh, Saudi Arabia

Posted 3 months ago

Responsibilities

• To support CISO and the Regional CISO EMEA (ex Germany and UKI) in cascading and implementing Information Security strategy in Saudi Arabia and provide country feedback to the Regional CISO.
• To ensure implementation of Information Security processes, identify gaps and realize Information Security initiatives and programs. This includes oversight of the implementation of IS controls in Saudi Arabia, as well as supporting Information Security Incident Management as necessary and raising Information Security awareness in the country.
• To monitor the local regulatory and legal environment, to capture new and changed requirements and to provide country feedback to the Regional CISO EMEA (ex. Germany and UK). In this process, compliance to local regulatory and legal requirements needs to be ensured, while acting as a main relationship body with respect to global CISO Regulatory team, local management, regulators, government agencies, associations, industry groups, business and clients.
• To develop and maintain local policies, if required, under the oversight of the Regional CISO EMEA (ex. Germany and UK) and in alignment with the Group’s and any relevant divisional or functional Information security policies to ensure consistency in IS rule setting.
• To ensure local projects involve Information Security at project start, provide Information Security expertise and ensure participation of central CISO functions where necessary.

Your Skills And Experience

• Minimum 5 years of Information Security experience within the Saudi Arabia finance industry, including strong regulatory expertise.
• Excellent Information Security skills, with strong knowledge of regulatory background in Saudi Arabia.
• Experience in financial service organizations in Saudi Arabia.
• Very good communication and organization skills.
• Independent and reliable working style.
• Bachelor Degree in Computer Science/ Information Technology or similar fields.
• CISM or CISSP.

To apply for this job email your details to [e-mail]