Chief Information Security Officer (CISO)

Overview

About Tameed

Job Description

Chief Information Security Officer (Ciso)

Key Responsibilities

• Lead the Cybersecurity General Department.
• Ensure Cybersecurity operations within assigned global services and vendors is in accordance with corporate and regulatory standards.
• Reporting on cybersecurity to the higher management.
• Ensure the assessment, facilitation and verification of cybersecurity standards within assigned global services and vendors is achieved in accordance with the requirements of Tameed as well as with any other external Cybersecurity or regulatory requirements
• Ensure that the compliance status of assigned global services and vendors is tracked and managed on a global level.
• Support implementation of Cybersecurity controls and standards.
• Cybersecurity awareness and training.
• Implementation of SAMA cyber-security framework
• Implementation and monitoring SAMA cyber security framework.
• Setup, implementation, and monitoring of SOC
• Remediation of any reported incident by SOC
• Setup, implementation, and monitoring of cyber security tools
• Responding to any incidents and remediating them
• Assist third party vendors with setup, implementation, monitoring, and remediation.
• Evaluate third parties based on need and requirements
• Ensuring that vendors adheres to cybersecurity policies and standards of Tameed
• Creating any needed policies and procedures within the SAMA cyber security framework
• Ensuring that Tameed employees from all departments adheres cybersecurity policies and standards
• Educating Tameed employees from all departments on cybersecurity threats that includes virtual or physical training
• Penetration and Vulnerability testing and remediation of any incidents
• Conducting audit and risk assessment on Tameed and closing any gaps
• Working within the Tameed QMS
• Closing any regulatory gaps
• Conduct cyber security weekly meetings
• Reporting weekly to CEO and committee on the statue of cybersecurity in Tameed
• Cybersecurity strategy
• Cybersecurity policy
• Cybersecurity architecture
• Cybersecurity risk management process

Requirements

• Bachelor’s degree in IT, Computer Science, or related field of Information Security/Technology.
• GBA: Preferably not less than 3.5 \ 5 or 2.5 \ 4.
• +5 years of experience in GRC, IT/Security operations, SOC role, or networking.
• Knowledge of Microsoft Word, Project, Excel, Access, Visio.
• Fluent in English language.
• Teamwork, Critical thinking and problem-solving abilities, Capability to communicate and listen to needs from organizational stakeholders.
• Positive attitude and commitment to work on projects and resolve technical problems.
• Ability to multitask and manage multiple priorities and commitments concurrently.
• Exceptional time-management skills and the ability to work under pressure.
• The ability to work among teams and handle multiple projects.
• Stay up to date on information technology trends and security standards.
• Excellent business writing and technical documentation skills.

Technical Skill

• Knowledge of SIEM (Security Information and Event Management).
• Familiar with SQL, C, C++, C#, Java, or PHP programming languages.
• Should have expertise on TCP/IP, computer networking, routing, and switching.
• Penetration and vulnerability testing.
• Knowledge and hands-on experience of implementing and managing Firewall and Intrusion Detection/Prevention Systems.
• Windows, UNIX, and Linux operating systems.
• Network protocols and packet analysis tools.
• Anti-virus and anti-malware.
• Job type and

Benefits

• Full time job
• 9:00 AM to 5:00 PM
• 30 Days Annual leave
• Apply through the company's official website or LinkedIn account.