Cybersecurity Specialist

Job Scope

Key Duties and Responsibilities

• Develop and update guidelines & procedures for Information Security Division to meet the Standard guidelines and compliance requirements.
• Ensure to follow Risk Assessment process as per ISO 31000 in line with its Corporate Enterprise Risk Management methodology.
• Conduct internal technical and process risk assessments as part of Self-Assessment activities at regular intervals.
• Review and measure the performance and effectiveness of the implemented OT & IT controls, mitigating IT Risks / gaps identified on an ongoing basis and build the ability, to prevent security incidents or responding quickly to any crisis situation and recover within agreed timeframe.
• Research and recommend appropriate technology controls to prevent, detect, respond to security compromise.
• Review Information Security postures by scheduling internal security audits periodically. Perform random security audits at vendor facilities.
• Facilitate and maintain audit evidence and closure of audit findings for all Internal Audits that include; Internal Controls Framework, Enterprise Risk Management – ERM, ISO 27001, ISA 99 / IEC 62443 and Corporate Governance Audits.
• Adopt and Align the existing IT and OT Controls to meet the National Institute of Standards and Technology Cyber Security Framework (NIST–CSF), 800-82, 800-53 requirements to measure and enhance the i) Joint venture maturity assessment posture ii) Saudi Arabian Monetary Agency (SAMA) iii) National C
• Develop and implement a data classification and privacy framework and assist the business departments with appropriate categorization of the data to ensure adequate technical controls are applied to prevent any potential leakage of confidential information.
• Establish a single IT and OT governance body, along with an advisory board including staff from the IT and the OT domains, to provide an overall oversight to develop a common IT guidelines and procedures for achieving integrated IT/OT security, through IT/OT Convergence.
• Maintain and continually improve IT Governance functions.
• Review and analyze the existing process including but not limited to; Organizational Information Security, Access Controls, Change Management, Human Resource Security, Incident Management, Asset Management, Operational and Communicational Security, System development and maintenance process, Physica

Education & Certification Requirements

• Bachelor’s Degree in Computer Science, IT, Computer Engineering or equivalent.
• Cybersecurity certification.

Years of Relevant Work Experience

• 15