| Job Location | Riyadh, Saudi Arabia |
| Education | Not Mentioned |
| Salary | Not Mentioned |
| Industry | Other Business Support Services |
| Functional Area | Not Mentioned |
Information Security Officerat Tarabut Gateway RiyadhReports to:Information Security Manager You will be a key member of the teams responsible for the ISO 27001 certified Information Security Management System (ISMS) - its governance and compliance across the business. You?ll be responsible for implementing SAMA?s Cybersecurity Framework and achieving the necessary maturity level. You?ll collaborate with technical and non-technical teams to ensure the implementation, compliance and awareness of both technical and organisational controls are to the highest standards. We seek team players that have low ego but high ambition. You?ll want to join a mission driven company, building a world class customer experience, creating a world class technology and security operating that inspires high performing teams. Maintain, communicate, audit, and improve the organisation?s ISO 27001 certified Information Security Management System. Deliver risk-based cyber security solutions that address people, process, and technology including information security policies & processes.RequirementsExperience working in SAMA-Regulated financial institutions. Track record in information security roles and working across related projects end to end. Experience implementing SAMA?s Cybersecurity Framework and have achieved sufficient maturity levels Experience maintaining the risk management plan, actions, target dates and updating actions. Experience implementing ISO 27001/2 controls across the business, as well as conducting regular audits. Experience supporting the implementation of detective, preventative, and corrective security controls to embed the organisations security frameworks, policies, standards, and procedures effectively (SAMA, NIST, NCA etc). Experience preforming gap analysis and NIST maturity assessments. Experience using project delivery tooling e.g. Confluence, JIRA, LucidChart, Office 365, etc. Knowledgeable of Data protection and experience implementing and maintaining processes in-line with government and regulatory requirements. Experience working within cloud hosting environments preferably AWS and OCI (a bonus). Experience with security incident response, digital forensics investigations and mock tabletop exercises. You may have dealt with a major security breach in the past (a bonus). Experience in or been involved in the Open Banking/Financial Services/Banks/Payments/FinTech space (a bonus). Were a remote-first company where teamwork and collaboration have no barriers. We embrace diversity and encourage talent who bring a range of perspectives to apply for our roles even if you do not match every requirement in the list above. TG makes hiring decisions based on experience, aptitude, skill and sharing our company values. We will not discriminate with regards to any legally protected characteristics.
Keyskills :
© 2023 HireeJobsGulf All Rights Reserved
