Network & Digital- Security Governance Officer

Job description: POSITION INFORMATION Division: Network & Digital Department:Security Role Designation: Security Governance Officer ROLE PURPOSE As a Security Governance Officer at AWASR, the primary objective is to support the establishment, implementation, and continuous improvement of security and privacy governance frameworks, policies, and procedures. The role contributes to identifying, assessing, and mitigating security and data protection risks, while ensuring compliance with applicable laws, regulations (including PDPL), and industry standards. The Security Governance Officer supports security awareness initiatives, audit and compliance activities, and incident response processes, while promoting a strong security culture across the organization. Through these efforts, the role plays a key part in safeguarding AWASR's information assets, Personal Data, systems, and overall organizational reputation against evolving threats and vulnerabilities. KEY ACCOUNTABILITIES AND RESPONSIBILITIES * Support the implementation and enforcement of security and Personal Data Protection policies, procedures, and standards across the organization, ensuring alignment with industry best practices, PDPL, and regulatory requirements. * Support the development and communication of the organization's security and privacy governance framework, strategy, and objectives to senior management and key stakeholders, ensuring alignment with business and compliance requirements. * Manage access control governance, including issuing access credentials, conducting periodic access reviews, and ensuring access to systems and Personal Data is granted based on least-privilege and business need principles. * Oversee visitor access processes and physical access controls to ensure protection of secure areas, systems, and environments handling sensitive information and Personal Data. * Conduct regular inspections and reviews of physical and environmental security controls to identify and address vulnerabilities that may impact information security and data protection. * Respond to security incidents and Personal Data breaches in accordance with governance and incident management frameworks, ensuring proper escalation, reporting, and coordination with the Data Protection Officer (DPO). * Assist in coordinating business continuity and emergency response activities, ensuring governance controls are in place to protect critical systems and Personal Data during incidents. * Conduct security and privacy awareness initiatives, promoting governance policies, regulatory obligations, and best practices across the organization. * Maintain accurate governance records, including security incidents, Personal Data breaches, risk registers, compliance documentation, and audit evidence, and prepare reports for senior management and regulatory bodies. * Ensure governance controls are applied to the protection of information assets, including secure handling, storage, classification, retention, and disposal of Personal Data * Collaborate with internal departments (IT, Legal, Compliance, HR) and external stakeholders to ensure consistent implementation of security and privacy governance practices. Monitor and assess compliance with security and privacy policies, standards, and regulatory requirements, report non-compliance, and support remediation activities. Identify gaps and opportunities to enhance security governance and data protection practices, driving continuous improvement of the organization's control framework. Support the execution of security and privacy governance assessments, including internal reviews and maturity assessments, to evaluate control effectiveness and compliance posture. Coordinate with internal and external auditors, regulators, and stakeholders to support audits, inspections, and regulatory reviews related to security and Personal Data Protection. Stay updated on emerging cybersecurity threats, vulnerabilities, and regulatory changes (including PDPL and TRA requirements), assessing their impact on governance frameworks and controls. Support the preparation and presentation of governance reports, dashboards, and metrics, highlighting key risks, incidents, compliance status, and performance indicators. Support the execution and maintenance of risk management processes, including identifying, documenting, assessing, and tracking security and privacy risks within the risk register. Assist in maintaining and updating information security and privacy governance policies, standards, and procedures to ensure ongoing compliance and effectiveness. Support third-party governance by conducting security and privacy assessments, ensuring vendors comply with contractual, regulatory, and Personal Data protection requirements. Ensure appropriate governance controls are applied to third-party access to systems and Personal Data, including due diligence, monitoring, and periodic reassessment. Contribute to maintaining governance documentation repositories, including policies, procedures, Records of Processing Activities (ROPA), and compliance evidence, ensuring audit readiness and version control. Qualifications & Experience * Bachelor's degree in information security, Computer Science, or a related field, or equivalent practical experience. * 1-3 year of experience in information security focused on security governance or previous internship or coursework in cybersecurity governance. * Basic understanding of security principles, standards, and best practices. * Familiarity with regulatory requirements related to security (e.g., GDPR, HIPAA, ISO27001,ITU Security standard, NIST etc). * Strong communication skills, both verbal and written. * Ability to work independently and collaboratively within a team. * Attention to detail and strong organizational skills. * Eagerness to learn and develop new skills in the field of cybersecurity. * Basic knowledge of security technologies and tools, or willingness to learn. * Experience with basic IT tasks or support roles is a plus. * Demonstrated ability to follow procedures and guidelines accurately. * Experience with Microsoft Office or similar productivity tools. * Any exposure to security awareness initiatives or training sessions is beneficial. * Familiarity with basic security concepts such as access control, incident response, and security protocols. Language Requirements for Role * English mandatory, Arabic mandatory ( both verbal and written). Core Competencies * Simplicity * Agility * Caring * Smart Technical Competencies * Cyber Security Management * Knowledge of Security Management * Security Governance * Security Monitoring Show more

Bachelor's degree in information security, Computer Science, or a related field, or equivalent practical experience. 1-3 year of experience in information security focused on security governance or previous internship or coursework in cybersecurity governance. Basic understanding of security principles, standards, and best practices. Familiarity with regulatory requirements related to security (e.g., GDPR, HIPAA, ISO27001, ITU Security standard, NIST etc). Strong communication skills, both verbal and written. Ability to work independently and collaboratively within a team. Attention to detail and strong organizational skills. Eagerness to learn and develop new skills in the field of cybersecurity. Basic knowledge of security technologies and tools, or willingness to learn. Experience with basic IT tasks or support roles is a plus. Demonstrated ability to follow procedures and guidelines accurately. Experience with Microsoft Office or similar productivity tools. Any exposure to security awareness initiatives or training sessions is beneficial. Familiarity with basic security concepts such as access control, incident response, and security protocols.

Support the implementation and enforcement of security and Personal Data Protection policies, procedures, and standards across the organization, ensuring alignment with industry best practices, PDPL, and regulatory requirements. Support the development and communication of the organization's security and privacy governance framework, strategy, and objectives to senior management and key stakeholders, ensuring alignment with business and compliance requirements. Manage access control governance, including issuing access credentials, conducting periodic access reviews, and ensuring access to systems and Personal Data is granted based on least-privilege and business need principles. Oversee visitor access processes and physical access controls to ensure protection of secure areas, systems, and environments handling sensitive information and Personal Data. Conduct regular inspections and reviews of physical and environmental security controls to identify and address vulnerabilities that may impact information security and data protection. Respond to security incidents and Personal Data breaches in accordance with governance and incident management frameworks, ensuring proper escalation, reporting, and coordination with the Data Protection Officer (DPO). Assist in coordinating business continuity and emergency response activities, ensuring governance controls are in place to protect critical systems and Personal Data during incidents. Conduct security and privacy awareness initiatives, promoting governance policies, regulatory obligations, and best practices across the organization. Maintain accurate governance records, including security incidents, Personal Data breaches, risk registers, compliance documentation, and audit evidence, and prepare reports for senior management and regulatory bodies. Ensure governance controls are applied to the protection of information assets, including secure handling, storage, classification, retention, and disposal of Personal Data. Collaborate with internal departments (IT, Legal, Compliance, HR) and external stakeholders to ensure consistent implementation of security and privacy governance practices. Monitor and assess compliance with security and privacy policies, standards, and regulatory requirements, report non-compliance, and support remediation activities. Identify gaps and opportunities to enhance security governance and data protection practices, driving continuous improvement of the organization's control framework. Support the execution of security and privacy governance assessments, including internal reviews and maturity assessments, to evaluate control effectiveness and compliance posture. Coordinate with internal and external auditors, regulators, and stakeholders to support audits, inspections, and regulatory reviews related to security and Personal Data Protection. Stay updated on emerging cybersecurity threats, vulnerabilities, and regulatory changes (including PDPL and TRA requirements), assessing their impact on governance frameworks and controls. Support the preparation and presentation of governance reports, dashboards, and metrics, highlighting key risks, incidents, compliance status, and performance indicators. Support the execution and maintenance of risk management processes, including identifying, documenting, assessing, and tracking security and privacy risks within the risk register. Assist in maintaining and updating information security and privacy governance policies, standards, and procedures to ensure ongoing compliance and effectiveness. Support third-party governance by conducting security and privacy assessments, ensuring vendors comply with contractual, regulatory, and Personal Data protection requirements. Ensure appropriate governance controls are applied to third-party access to systems and Personal Data, including due diligence, monitoring, and periodic reassessment. Contribute to maintaining governance documentation repositories, including policies, procedures, Records of Processing Activities (ROPA), and compliance evidence, ensuring audit readiness and version control.