وظيفة مدقق داخلي لتقنية المعلومات والأمن السيبراني لدى نسيج للتقنية في الرياض

Company Description:

Naseej is a leading technology company committed to harnessing the power of digital transformation in learning & knowledge management by enabling our customers to provide rich experiences for their users and adapt to a dynamic technology landscape while reducing their technical burden enabling them to focus on achieving their strategic objectives. And for almost 36 years, Naseej with its branches all over the MENA region had made many contributions to be one of the market leaders in the fields of E-Learning, Edu-Tech & Digital transformation. Naseej website:

Job Summary:

We're looking for an external expert to carry out the execution (fieldwork) of the cybersecurity and IT audit included in the approved internal audit plan. Internal Audit will set the scope, supervise and review the work, and issue the report.

Key Responsibilities:

• The expert will test the controls, collect evidence, and document the results for:

  1. Compliance with the National Cybersecurity Authority (NCA) controls applicable to the company.

  2. IT disaster recovery: the recovery plan, backup and restoration, and plan testing..

Requirements:

• At least [5] years of experience in cybersecurity and IT auditing.

• Knowledge of NCA cybersecurity frameworks, including the Essential Cybersecurity Controls (ECC).

• Experience reviewing disaster recovery plans.

• A recognized professional certification such as CISA, or equivalent..