وظيفة مدير إدارة مخاطر الأمن السيبراني لدى البنك السعودي الأول في الرياض

Title: Cybersecurity Risk Management Manager

Department: Cybersecurity - Risk Management

Location: Riyadh

Core Responsibilities:

• Conduct detailed and risk-based Cybersecurity Risk Assessment, meeting SLA commitments during IT and cybersecurity engagements.
• Maintains a close awareness of best practices and industry standards in Information Security assesses potential policy gaps and/or loopholes and responding risks to SAB IT infrastructure, systems, network and data and recommends any improvements in policies.
• Liaises closely with end users, explains Cybersecurity risks and the business role in preventing Cybersecurity risks and drives initiatives to sensitize end-users on Cybersecurity risks.
• Advise IT and business on the optimal way of dealing the identified Cybersecurity risks and mitigation.
• Final Cybersecurity Risk Assessment: Execute comprehensive Cybersecurity Risk Assessment before go-live.
• Conduct detailed Cybersecurity Threat Modeling
• Threat Modeling & Risk Assessments: Conduct detailed cybersecurity risk assessments and threat modeling for IT projects and systems - at early project stages, before major changes, for new technologies, and periodically for existing assets. Identify threats, vulnerabilities, and controls for critical information assets and document these risks in a centralized risk register.
• Cybersecurity Risk Assessment Validation: Review, analyze, and validate Cybersecurity Risk Assessment results to align the result with Cybersecurity issues raised by other Cybersecurity teams.
• Raise application security related defect
• Enhance Cybersecurity pattern during engagements, periodic assessments or Ad-Hoc assessments by highlighting new risks to domain owners
• All engaged/assigned engagements, periodic assessments or Ad-Hoc assessments should be assessed in accordance to the Cybersecurity Risk Management Methodology, Cybersecurity Risk Pattern and Cybersecurity Change Review and Engagement Process and within the agreed timeline (SLA)
• Cybersecurity Risk Assessment platform Tuning: Customize and fine-tune Cybersecurity risk assessment platform (e.g., IriusRisk) for optimal compatibility and accuracy.

Qualifications and Requirements:

• Bachelor's degree in Cyber-Security / Computer Science, or related field required.
• Around 5 years of experience with preferred 3 years in a relevant role.