Sr. Specialist, Cybersecurity GRC

An exciting opportunity is available for a Sr. Specialist in Cybersecurity GRC, who will report to the Chief Information Security Officer in Riyadh, Saudi Arabia. This individual contributor role supports the organization’s leadership in directing information security efforts across TASNEE and its subsidiaries. The position establishes the vision and direction for information security strategies and activities, advising on effective management of the organization’s cyber risks.

Position Responsibilities:

• Develop and maintain information security strategy and policies that align with TASNEE's business strategy and comply with national cybersecurity authority regulations and global standards for IT and OT.
• Promote awareness of cybersecurity within the organization.
• Collaborate with stakeholders to implement and maintain information security risk management and governance programs.
• Communicate cybersecurity threats and mitigations to relevant third parties.

Qualification and Requirements:

• Bachelor's Degree or higher in Computer Engineering, Information and Computer Science, or Cybersecurity.
• Minimum of 5 years of hands-on experience in IT/OT with a focus on cybersecurity.

Skills:

• Determine normal operational state for security systems and understand how change affects that state.
• Strong communication skills with all levels of staff.
• Ability to identify new cybersecurity threats promptly.
• Experience in developing policies reflecting the organization's business and cybersecurity objectives.
• Evaluate the viability and legitimacy of suppliers and products.
• Continually identify new technologies and their potential impact on information security requirements.
• Critical thinking to recognize organizational challenges and relationships.
• Negotiation skills for vendor agreements.
• Knowledge of relevant regulatory standards for IT and OT.

Work Conditions:

• Full-time, on-site role.