وظيفة ضابط سياسات الأمن السيبراني لدى Diyar United Company في الخفجي

Key Responsibilities

• Develop, review, and maintain cybersecurity policies, standards, procedures, and guidelines.
• Ensure organizational compliance with cybersecurity frameworks, particularly the NIST Cybersecurity Framework (CSF).
• Conduct cybersecurity risk assessments and identify areas for improvement.
• Collaborate with IT and business teams to implement and monitor security controls.
• Support internal and external security audits and compliance initiatives.
• Monitor evolving cybersecurity threats, regulations, and industry best practices to ensure policies remain current.
• Recommend and implement security governance improvements to strengthen the organization's security posture.
• Prepare reports, documentation, and presentations related to cybersecurity governance and compliance.
• Promote security awareness and provide guidance on cybersecurity policies and best practices across the organization.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline (or equivalent practical experience).
• Fluent in English with excellent written and verbal communication skills.
• Professional certification in at least one of the following:
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CRISC (Certified in Risk and Information Systems Control)
• CISA (Certified Information Systems Auditor)

Required Skills & Experience

• Strong knowledge and practical experience with the NIST Cybersecurity Framework (CSF) and related cybersecurity standards.
• Experience in cybersecurity governance, policy development, risk management, and compliance.
• Ability to conduct risk assessments and recommend appropriate security controls.
• Familiarity with information security principles, security frameworks, and regulatory compliance requirements.
• Strong analytical, documentation, and stakeholder communication skills.
• Experience working with cross-functional teams to implement and maintain cybersecurity policies.

Preferred Qualifications

• Experience with additional security frameworks such as ISO/IEC 27001, COBIT, or PCI DSS.
• Knowledge of IT risk management, audit processes, and information security governance.
• Experience in regulated industries such as banking, finance, healthcare, telecommunications, or government is an advantage.