The role involves developing, updating, and maintaining cybersecurity policies to align with an organization’s cybersecurity requirements. It focuses on identifying, assessing, and managing cybersecurity risks to protect information and technology assets, ensuring compliance with applicable requirements, policies, and standards.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Duties and Responsibilities:
- Develop and review cybersecurity policies and related documentation with stakeholders.
- Establish and maintain appropriate communication channels with stakeholders.
- Conduct and review Cybersecurity Awareness program.
- Promote awareness of cybersecurity policy and strategy among management and staff.
- Monitor the implementation effectiveness of cybersecurity policies in planning and management services.
- Conduct an initial risk assessment of stakeholder assets and update it continuously.
- Review, conduct, or participate in audits of cyber programs and projects.
- Develop risk mitigation strategies in accordance with organizational risk appetite.
- Ensure cybersecurity decisions are based on sound risk management principles.
- Perform risk analysis during major changes to applications or systems.
- Identify and manage cybersecurity risks through the organization's risk governance process.
- Use continuous monitoring tools for ongoing risk assessment.
- Evaluate cybersecurity aspects of contracts for compliance with regulations.
- Identify patterns of non-compliance to improve documentation.
- Periodically review cybersecurity strategies, policies, and documentation for compliance.
- Collaborate with stakeholders to resolve cybersecurity incidents and compliance issues.
- Develop specifications to align risk, compliance, and assurance efforts with cybersecurity requirements.
- Monitor system compliance with cybersecurity, resilience, and dependability standards.
- Support compliance activities as necessary.
- Stay informed about applicable legislation, regulations, and accreditation standards for organizational compliance.
Skills, Knowledge and Abilities:
- Understanding of network components, operations, and security controls.
- Knowledge of risk assessment, mitigation, and management methods.
- Familiarity with relevant cybersecurity legislation, regulatory requirements, and standards like NCA ECC/CCC and SAMA CSF.
Minimum Qualifications and Experience:
- Education: Bachelor’s degree in Computer Science, Information Security, or related field.
- Experience: 4+ years in Governance, Risk, and Compliance (GRC).
- Certifications: CRISC, CISA, ISO27001 Lead Implementer, or similar preferred.
- Language: Proficiency in English and Arabic.
