hireejobsgulf
Register for Job

Cyber Security GRC Specialist

2.00 to 4.00 Years   Saudi Arabia   02 Aug, 2023
Confidential Company
1 Jobs Openings
Job LocationSaudi Arabia
EducationBachelor's degree / higher diploma
SalaryNot Mentioned
IndustryIT Services
Functional AreaNot Mentioned

Job Description

Job SummaryUnder the direction of management, the incumbent coordinates and performs security assessment functions, control testing reporting, and activities in accordance of Internal Controls compliance, regulatory and departmental policy and procedures. The cyber Security GRC Specialist updates and maintains control matrices and spreadsheets and provides recommendations for management?s consideration. This position ensures compliance with Tamara?s internal controls, regulatory and information security policies and procedures. The incumbent works with internal audit, external audit firms, and regulatory agencies to provide supportive documentation as applicable. The Cyber Security GRC Specialist takes a lead role in ensuring the security of all protected information collected, used, maintained.Typical Duties and Responsibilities:

  • Implements security controls, risk assessment framework, and program that align to regulatory requirements, ensuring documented and sustainable compliance that aligns and advances College business objectives.
  • Evaluates risks and develops security standards, procedures, and controls to manage risks. Improves Tamara?s security positioning through process improvement, policy, automation, and the continuous evolution of capabilities.
  • Implements processes, such as GRC (governance, risk and compliance), to automate and continuously monitor information security controls, exceptions, risks, testing. Develops reporting metrics, dashboards, and evidence artifacts.
  • Defines and documents business process responsibilities and ownership of the controls in the GRC tool. Schedules regular assessments and testing of effectiveness and efficiency of controls and creates GRC reports.
  • Updates security controls and provides support to all stakeholders on security controls covering internal assessments, regulations (SAMA, NCA, and GCC), protecting Personally Identifying Information (PII) data, and Payment Card Industry Data Security Standards (PCI DSS).
  • Performs and investigates internal and external information security risk and exceptions assessments. Assess incidents, vulnerability management, scans, patching status, secure baselines, penetration test result, phishing, and social engineering tests and attacks.
  • Help in documenting and reporting control failures and gaps to stakeholders. Provides remediation guidance and prepares management reports to track remediation activities.
  • Assists other staff in the management and oversight of security program functions.
  • Trains, guides, and acts as a resource on security assessment functions to other departments within the College.
  • Remains current on best practices and technological advancements and acts as the College?s technical resource for security assessment and regulatory compliance.
  • Performs other related duties as assigned.

Keyskills :

APPLY NOW

Related Jobs

© 2023 HireeJobsGulf All Rights Reserved