بنك الرياض يعلن عن وظيفة أخصائي أول إدارة استراتيجية الأمن السيبراني في الرياض
تفاصيل الوظيفة
يدعم هذا الدور تطوير وتنفيذ وتحسين استراتيجية الأمن السيبراني في بنك الرياض (الرياض)، من خلال تقييم الوضع الحالي، واقتراح المبادرات، ومواءمة الأهداف مع أولويات العمل، بالإضافة إلى تنسيق مشاريع الأمن السيبراني وضمان تسليمها في الوقت المحدد وضمن النطاق والميزانية.
المهام والمسؤوليات
- اتباع جميع السياسات والإجراءات واللوائح ذات الصلة لضمان سير العمل بشكل محكم ومتسق.
- إدارة العمليات اليومية المتعلقة بالدور لضمان استمرارية العمل.
- المساعدة في تطوير وتنفيذ استراتيجيات أمن سيبراني طويلة المدى تتماشى مع أولويات بنك الرياض.
- المساهمة في تحديد الأهداف الاستراتيجية والمبادرات الرئيسية ومؤشرات الأداء لتعزيز الوضع الأمني للمؤسسة.
- تحليل اتجاهات وتهديدات وبيانات الأمن السيبراني لتقديم رؤى تدعم اتخاذ القرارات الاستراتيجية.
- دعم إنشاء خرائط طريق متعددة السنوات لتطوير القدرات الأمنية، بالتنسيق مع فرق البنية التحتية والتشغيل.
- التعاون مع القيادة التنفيذية وتقنية الأعمال والوحدات التجارية لتسهيل التواصل ومواءمة الاستراتيجية.
- إعداد تقارير ولوحات متابعة دورية حول التقدم الاستراتيجي للقيادة، وتوثيق عمليات التخطيط والقرارات.
- تقديم المشورة لدمج ممارسات الأمن السيبراني في العمليات التجارية، وإعداد مواد إرشادية للنقاشات الاستراتيجية.
- دعم قائد الوحدة في تنسيق أنشطة المشاريع وتطوير خطط شاملة تشمل الجداول الزمنية والأدوار والمسؤوليات.
- مراقبة تقدم المشاريع والإبلاغ عن المخاطر المحتملة، وضمان تسليم المشاريع في الوقت المحدد وضمن النطاق والجودة.
- ضمان امتثال المشاريع للمعايير التنظيمية والأمنية، وإجراء مراجعات ما بعد التنفيذ وتوثيق النتائج.
- المساهمة في تحديد فرص التحسين المستمر للعمليات والممارسات وفقاً لأفضل الممارسات العالمية.
الشروط والمتطلبات
- بكالوريوس في الأمن السيبراني أو تقنية المعلومات أو مجال ذي صلة.
- الشهادات المهنية ذات الصلة (مثل CISSP أو CISM) تعتبر ميزة إضافية.
- خبرة من 4 إلى 6 سنوات في الأمن السيبراني أو استراتيجية تقنية المعلومات أو مجال ذي صلة.
- إجادة اللغة الإنجليزية.
عرض النص الأصلي للإعلان
Job Purpose / Role:
To support the development, implementation, and continuous refinement of Riyad Bank’s cybersecurity strategy. This role involves conducting current state assessments, contributing to the creation of initiatives that address identified gaps, and aligning objectives with business priorities. The specialist collaborates with cross-functional teams, prepares detailed reports, and facilitates stakeholder communications to ensure strategic alignment and engagement. Additionally, the role provides advisory support to integrate security practices within business processes, striving to enhance the organization's overall security posture through tailored solutions and continuous improvement. Also the role supports the planning, coordination, and execution of cybersecurity projects and initiatives. This role ensures that cybersecurity efforts are delivered on time, within scope and budget, and aligned with Riyad Bank’s goals and risk management strategies.
Areas Of Responsibility:
- Policies, Processes & Procedures
Follows all relevant departmental policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner.
- Day- to-day operations
Follows the day-to-day operations related to your own job to ensure continuity of work.
- Cybersecurity Strategy Management
Assist in developing and implementing long-term cybersecurity strategies aligned with Riyad Bank’s priorities.
Contribute to the definition of strategic objectives, key initiatives, and performance indicators to bolster the organization's security posture.
Analyze cybersecurity trends, threats, and data to provide insights that inform strategic decision-making.
Monitor industry best practices and emerging technologies that could enhance Riyad Bank’s cybersecurity capabilities.
Identify strengths and areas for improvement in cybersecurity strategies.
Assist in creating target statements for desired future state of cybersecurity.
Support the development of initiatives to bridge identified gaps.
Collaborate with teams to align initiatives with departmental objectives.
Support in developing multi-year cybersecurity roadmaps focusing on capability development.
Coordinate with architecture and operations teams for technological alignment.
Engage with executive leadership, Business Technology, and business units.
Facilitate stakeholder communication and engagement for strategy alignment.
Assist in defining and tracking strategic KPIs and metrics.
Prepare reports and dashboards on strategic progress for leadership.
Provide advisory support for the integration of cybersecurity practices in business processes.
Develop advisory reports and materials for strategic discussions.
Maintain documentation of strategic planning processes, decisions, and outcomes.
Promote knowledge sharing related to the cybersecurity strategy within Riyad Bank.
Support in drafting investment justifications and strategic updates.
Evaluate effectiveness of cybersecurity programs and initiatives.
Participate in cross-functional strategic planning sessions.
Facilitate regular strategy review meetings for continuous improvement.
Assist in identifying potential risks to strategic goals and proposing solutions.
- Support cybersecurity projects
Support the unit lead in coordinating project activities and resources.
Assist in developing comprehensive program plans detailing timelines, roles, responsibilities, and deliverables.
Provide input and feedback to the unit lead on program plan adjustments.
Support the establishment and maintenance of a standardized program management framework.
Work with the unit leads to evaluating and refine management frameworks.
Plan and oversee the execution of cybersecurity projects using structured methodologies.
Monitor project progress and report potential risks to the unit lead.
Assist in evaluating and selecting appropriate project management tools and methodologies.
Ensure timely delivery of projects, maintaining scope, quality, and timelines.
Support the unit lead in managing deadlines and coordinating resources for on-time completion.
Facilitate regular progress meetings and status updates for stakeholders.
Assist the unit lead in preparing presentations for executive leadership.
Track and analyze project performance metrics.
Collaborating with the unit lead to implementing lessons learned for process improvements.
Align project outcomes with Riyad Bank’s cybersecurity strategy and risk management objectives.
Conduct post-implementation reviews and document outcomes.
Ensure project compliance with regulatory and security standards.
Support the unit lead in monitoring project compliance.
Assist the unit lead to maintaining stakeholder relationships and communication.
Provide consistent support to the unit lead in project oversight and strategic decision-making.
Assist the unit lead in resource allocation and strategic planning of cybersecurity initiatives.
- Continuous Improvement
Contributes to the identification of opportunities for continuous improvement of processes and practices considering “international best practice”, improvement of business processes, cost reduction and productivity environment.
- Reporting
Assists in the preparation of a timely and accurate report of Riyad Bank to meet company and department requirements, policies and standards.
- Safety, Quality & Environment:
Complies with all relevant safety, quality and environmental management procedures and controls to ensure a healthy and safe work environment.
Qualifications & Experience:
Minimum Qualifications:
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
- Relevant certifications (e.g., CISSP, CISM, or equivalent) are a plus.
Minimum Experience:
- 4-6 years of experience in cybersecurity, IT strategy, or a related field.
Language:
Proficiency in English is required.