Saudi Railway Company

Cyber Security Governance, Risk and Compliance (GRC) Senior Specialist

Riyadh, Saudi ArabiaPosted 2 days ago

Salary
AED 6k–9k a month· est.
Job type
Full time
Level
Senior
Field
Engineering & Technology
Work mode
On site

About the role

We are looking for Cyber Security GRC Senior Specialist for our company! Department: Cyber Security. Job Purpose: • Provides general GRC cybersecurity support. • Perform cybersecurity tasks. • Identifies, assesses, and manages an organization’s cybersecurity risks protecting its information and technology assets in line with organizational policies and procedures and related laws and regulations. • Develop cybersecurity policies and related documentation. • Review existing and proposed policies and related documentation with stakeholders. • Work with stakeholders to develop cybersecurity policies and associated documentation in alignment with the organization's cybersecurity strategy. • Ensures an organization’s cybersecurity program complies with applicable requirements, policies, and standards. • Develops, updates, and maintains cybersecurity policies to support and align with an organization’s cybersecurity requirements. • Help analyzes cybersecurity controls and assesses their effectiveness. • Participate in cybersecurity audits to assess an organization’s compliance with applicable requirements, policies, standards, and controls. • Assist in preparing audit reports and communicating them to authorized parties. • Help evaluate cybersecurity aspects of contracts to ensure compliance with regulatory requirements. • Recognize patterns of non-compliance with cybersecurity policies and related documentation to identify ways to improve the documentation. • Support in reviewing cybersecurity strategy, policies and related documents to maintain compliance with applicable legislation and regulation. • Work with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues. • Help in Developing the methods to effectively monitor and measure risk, compliance, and assurance efforts. • Maintain knowledge of applicable cybersecurity defense policies, regulations, and compliance documents as they pertain to cybersecurity defense auditing. • Provide support to compliance activities as necessary. • Maintain knowledge of applicable legislation, regulation and accreditation standards and regularly review these to ensure continued organizational compliance. • Conduct Cybersecurity risk assessment on applications, new services, when obtaining third party services. • NCA, ISO 27001 Qualifications: • Bachelor’s degree in computer science, Cyber Security, Computer Engineering, Information Technology • A minimum of 5 years of relevant experience

Requirements

Bachelor’s degree in computer science, Cyber Security, Computer Engineering, Information Technology. A minimum of 5 years of relevant experience.

Responsibilities

Provides general GRC cybersecurity support. Perform cybersecurity tasks. Identifies, assesses, and manages an organization’s cybersecurity risks protecting its information and technology assets in line with organizational policies and procedures and related laws and regulations. Develop cybersecurity policies and related documentation. Review existing and proposed policies and related documentation with stakeholders. Work with stakeholders to develop cybersecurity policies and associated documentation in alignment with the organization's cybersecurity strategy. Ensures an organization’s cybersecurity program complies with applicable requirements, policies, and standards. Develops, updates, and maintains cybersecurity policies to support and align with an organization’s cybersecurity requirements. Help analyzes cybersecurity controls and assesses their effectiveness. Participate in cybersecurity audits to assess an organization’s compliance with applicable requirements, policies, standards, and controls. Assist in preparing audit reports and communicating them to authorized parties. Help evaluate cybersecurity aspects of contracts to ensure compliance with regulatory requirements. Recognize patterns of non-compliance with cybersecurity policies and related documentation to identify ways to improve the documentation. Support in reviewing cybersecurity strategy, policies and related documents to maintain compliance with applicable legislation and regulation. Work with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues. Help in Developing the methods to effectively monitor and measure risk, compliance, and assurance efforts. Maintain knowledge of applicable cybersecurity defense policies, regulations, and compliance documents as they pertain to cybersecurity defense auditing. Provide support to compliance activities as necessary. Maintain knowledge of applicable legislation, regulation and accreditation standards and regularly review these to ensure continued organizational compliance. Conduct Cybersecurity risk assessment on applications, new services, when obtaining third party services. NCA, ISO 27001

Skills

  • GRC
  • cybersecurity policy development
  • cybersecurity audits
  • risk assessment
  • compliance with NCA and ISO 27001
  • contract risk evaluation
  • stakeholder engagement
  • policy documentation
  • controls analysis
  • incident response
  • regulatory compliance
  • vulnerability management

Not sure you fit this role?

Upload your CV and see how you score against Saudi Railway Company and every other live job. It's free.

Get my free matches
Compliance jobs in Riyadh55 live roles, top employers and pay.See all →

Similar jobs across the Gulf