وظيفة مدير GRC للأمن السيبراني لدى GULF GENERAL COOPERATIVE INSURANCE CO. في مكة وجدة

Key Responsibilities

• Develop, implement, and continuously improve the Cyber Security Governance framework, policies, standards, and procedures.
• Lead the creation and execution of the Cyber Security Strategy, aligning it with overall business goals.
• Provide regular reports to the CISO and executive management on the state of cybersecurity.
• Establish and manage a security metrics and Key Performance Indicator (KPI) program to measure program effectiveness.
• Design and manage a comprehensive enterprise-wide Cyber Security Risk Management program.
• Conduct regular risk assessments, including Business Impact Analysis (BIA), to identify, analyze, and evaluate information security risks.
• Facilitate risk treatment planning with business and technology owners, ensuring appropriate mitigation strategies.
• Manage the vendor risk management program, assessing the security posture of third-party vendors, especially cloud service providers and payment gateways.
• Integrate risk management into the Software Development Life Cycle (SDLC) and change management processes.
• Ensure continuous compliance with SAMA's Cyber Security Framework (CSF), Insurance Authority, NCA requirements, and other relevant regulations.
• Manage the process for obtaining and maintaining necessary regulatory licenses and certifications from a cybersecurity perspective.
• Prepare and submit accurate and timely regulatory reports, questionnaires, and evidence requests.