وظيفة خبير حوكمة شاغرة في الرياض لدى جهة غير معلنة

Key Responsibilities

1. Provides advice on developing the information security strategy, policies, standards, controls, and related procedures.
2. Provides advice on activities related to preparing and updating the information security strategy and participating in the development of the digital transformation strategy.
3. Reviews activities related to developing information security policies, standards, controls, and related procedures, and continuously reviews them.
4. Defines specific information security procedures and updates them as needed and in accordance with established procedures.
5. Recommends participation in establishing a framework for roles and responsibilities related to information ownership, classification, accountability controls, and information protection procedures.
6. Recommends the supervision of strategic cybersecurity projects.
7. Determines the ability of information security controls to mitigate risks and provides recommendations in this regard.
8. Recommends activities related to conducting impact assessments when changes occur in specific legislation and policies, and assessing the extent to which they can be implemented.
9. Recommends tasks involving responsibility for establishing technical security measures in accordance with policies and standards, and reviewing all technical (architectural) designs and obtaining cybersecurity approval before implementation.
10. Reviews activities related to the use of software engineering (architecture) and software systems research to develop new capabilities and ensure cybersecurity integration.
11. Reviews reporting activities, such as phishing simulation results, breaches, and follow-up on awareness with employees.
12. Complies with the policies, work conduct, and procedures applicable to the organizational unit.
13. Performs any other tasks assigned by direct supervisors.

Required Experience

• Minimum of 6 years of experience in a relevant field.

Education

• Bachelor’s degree in Cybersecurity or any related field.