Saudi Railway Company تعلن عن وظيفة أخصائي أول حوكمة ومخاطر وامتثال الأمن السيبراني في الرياض

We are looking for Cyber Security GRC Senior Specialist for our company!

Department: Cyber Security.

Job Purpose:

• Provides general GRC cybersecurity support.
• Perform cybersecurity tasks.
• Identifies, assesses, and manages an organization’s cybersecurity risks protecting its information and technology assets in line with organizational policies and procedures and related laws and regulations.
• Develop cybersecurity policies and related documentation.
• Review existing and proposed policies and related documentation with stakeholders.
• Work with stakeholders to develop cybersecurity policies and associated documentation in alignment with the organization's cybersecurity strategy.
• Ensures an organization’s cybersecurity program complies with applicable requirements, policies, and standards.
• Develops, updates, and maintains cybersecurity policies to support and align with an organization’s cybersecurity requirements.
• Help analyzes cybersecurity controls and assesses their effectiveness.
• Participate in cybersecurity audits to assess an organization’s compliance with applicable requirements, policies, standards, and controls.
• Assist in preparing audit reports and communicating them to authorized parties.
• Help evaluate cybersecurity aspects of contracts to ensure compliance with regulatory requirements.
• Recognize patterns of non-compliance with cybersecurity policies and related documentation to identify ways to improve the documentation.
• Support in reviewing cybersecurity strategy, policies and related documents to maintain compliance with applicable legislation and regulation.
• Work with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues.
• Help in Developing the methods to effectively monitor and measure risk, compliance, and assurance efforts.
• Maintain knowledge of applicable cybersecurity defense policies, regulations, and compliance documents as they pertain to cybersecurity defense auditing.
• Provide support to compliance activities as necessary.
• Maintain knowledge of applicable legislation, regulation and accreditation standards and regularly review these to ensure continued organizational compliance.
• Conduct Cybersecurity risk assessment on applications, new services, when obtaining third party services.
• NCA, ISO 27001

Qualifications:

• Bachelor’s degree in computer science, Cyber Security, Computer Engineering, Information Technology
• A minimum of 5 years of relevant experience