Risk Management Expert

About the role

Requirements

• Minimum of 6 years of experience in a relevant field.
• Bachelor’s degree in Cybersecurity or any related field.

Responsibilities

• Provides advice on analyzing and assessing risks to the Information Technology environment.
• Recommends activities related to continuous security assessments of the organization's systems and services in alignment with the Technology Risk Management Framework.
• Recommends activities related to analyzing and assessing risks to the Information Technology environment.
• Provides advice on participating in cybersecurity incident response.
• Recommends actions related to monitoring emerging security threats and monitoring the implementation of necessary measures to mitigate risks, in coordination and alignment with Operational Risk Management, as applicable.
• Reviews the disaster response and business continuity plan, in coordination and alignment with Operational Risk Management, as applicable.
• Recommends actions to ensure the availability of cybersecurity resilience requirements in the Business Continuity Plan.
• Identifies tasks related to the ability of information security controls to mitigate risks and provides recommendations in this regard.
• Recommends actions to ensure the protection of information and technology assets from cyber risks related to external parties.
• Reviews the processes for assessing the security awareness of system users.
• Proposes activities for developing plans and implementation programs to enhance security awareness, in coordination with various concerned organizational units (such as: the General Department of Human Resources and the Corporate Communications Department).
• Proposes activities for implementing security awareness programs and working to develop them.
• Recommends actions to ensure that security awareness programs comply with all relevant regulations, standards, and requirements of the relevant legislative authorities.
• Complies with the organization's policies and work behaviors and the procedures of the organizational unit.
• Performs any other tasks assigned by direct supervisors.

Skills

• Cybersecurity
• Information Security
• Risk Assessment
• Security Awareness
• Business Continuity Planning
• Disaster Recovery
• Incident Response
• Regulatory Compliance
• Threat Monitoring
• Operational Risk Management
• IT Governance