Information Security GRC Lead Specialist

4 weeks ago

Riyadh, Ar Riyāḑ, Saudi Arabia هيئة الزكاة والضريبة والجمارك Full time
Information Security GRC Lead Specialist

Company: Zakat, Tax and Customs Authority

Jobholders at this level may be regarded as a source of expertise and are responsible for developing frameworks, policies, and operational plans. They also analyze complex issues, understand business needs, bring together multiple concepts and translate them into tangible actions and support to enhance performance of the function. They are responsible for developing, maintaining, and publishing up-to-date information security policies, standards, and guidelines and overseeing the approval, training, and dissemination of security policies and practices.

Information Security Governance
  1. Set information security policies, standards and develop accordingly related processes ensuring alignment with cybersecurity regulatory requirements.
  2. Design information security procedures and frameworks to ensure consistency in the implementation of security control.
  3. Develop information security, governance, risk and compliance programs for effective management of IT and security risks meeting compliance requirements.
  4. Prepare cybersecurity awareness programs and develop education plan including workshops, seminars, etc. regarding standards, policies and governance processes foster attentiveness and knowledge in cybersecurity topics across ZATCA's employees.
  5. Conduct cybersecurity risk assessment to identify potential risks and related daily changes initiating the development of needed mitigation plan.
  6. Develop risk mitigation plan and remediation plan to effectively manage risk in accordance with ZATCA's risk appetite.
  7. Manage cybersecurity risks and risks register to identify, log and track potential risks ensuring compliance with cybersecurity standards and governance policies and procedures.
  8. Follow-up on the implementation of corresponding mitigating controls as per set plan ensuring update of risk register.
  9. Conduct risk assessment for the identified non-conformities during security audits and recommend accordingly needed improvement action for protection and detection capabilities.
Information Security Compliance
  1. Perform information security audit, semiannually assessment against NCA and annually assessment against ISO 27001 to recognize patterns and cases of non-compliance with cybersecurity policies and recommend accordingly areas of improvement.
  2. Manage non-compliance cases improving business process and operations by supporting external assessments against NCA framework.
  3. Develop periodic report consolidating the status of information security compliance and report it with regulates (ISO 27001 & NCA).
Organization and Operations
  1. Follow all relevant policies, processes and standard operating procedures so that work is carried out in a controlled and consistent manner.
  2. Help in solving escalated problems and provide needed support for junior team to ensure work is carried out in an efficient manner.
  3. Escalate complex problems to the relevant person to ensure cases/issues are closed properly.
  4. Perform other duties as requested.
People Management
  1. Train junior staff on the different job activities to ensure transfer of know-how, when applicable.
  2. Provide clear direction, prioritize tasks, assign and delegate responsibility, and monitor the workflow of subordinates/junior staff.
  3. Support junior staff or direct reports in order to execute their duties according to set policies and processes.
Minimum Qualifications
  1. Bachelor's degree in Science in Cybersecurity or equivalent is required.
  2. Master's degree in Cybersecurity or equivalent is preferred.
  3. A minimum of 4 years of relevant experience.
Cybersecurity Incident and Investigation

Advanced

#J-18808-Ljbffr

  • GRC Specialist

    1 day ago

    Riyadh, Ar Riyāḑ, Saudi Arabia beBee Careers Full time

    GRC Specialist Job OverviewThe Senior Information Security Governance, Risk, and Compliance (GRC) Specialist plays a critical role in ensuring the organization's information security program meets industry standards and regulations.Responsibilities:Security Policy Expertise: Develop and maintain security policies, standards, and procedures.Risk Assessment...

  • Senior Information Security GRC Specialist

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Dimension Data NTT ltd Full time

    Senior Information Security GRC SpecialistQualification: Bachelor's in Computer Application (Computers)Nationality: Any NationalityVacancy: 1 VacancyJob DescriptionYour day at NTT DATAThe Senior Information Security Governance, Risk and Compliance (GRC) Specialist is an advanced subject matter expert responsible for overseeing the organization's information...

  • Senior Information Security GRC Specialist

    1 week ago

    Riyadh, Ar Riyāḑ, Saudi Arabia NTT DATA Middle East and Africa Full time

    Senior Information Security GRC Specialist - Jeddah, KSAJoin us to apply for the Senior Information Security GRC Specialist - Jeddah, KSA role at NTT DATA Middle East and Africa.Make an impact with NTT DATAJoin a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, making a...

  • Senior Information Security GRC Specialist

    3 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Applicable Limited Full time

    Continue to make an impact with a company that is pushing the boundaries of what is possible. At NTT DATA, we are renowned for our technical excellence, leading innovations, and making a difference for our clients and society. Our workplace embraces diversity and inclusion – it's a place where you can continue to grow, belong, and thrive.Your career here...

  • Information Security Governance Specialist

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia beBee Careers Full time

    As a Senior Information Security Governance, Risk and Compliance (GRC) Specialist, you will play a crucial role in overseeing the organization's information security program. This involves leading risk assessments, developing security policies, ensuring alignment with industry standards and regulations, and fostering a culture of security awareness among...

  • Junior GRC Specialist

    3 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Giza Systems Full time

    Junior GRC Specialist - Information SecurityJob DescriptionRole:The GRC Specialist participates in information security Governance, Risk Management, and Compliance engagements within Jafeer and for Jafeer customers.Responsibilities:Participate in various IT Risk Management & Business Continuity initiatives.Ensure that requirements in IT Audit, Standards,...

  • Advanced Information Security Professional

    22 hours ago

    Riyadh, Ar Riyāḑ, Saudi Arabia beBee Careers Full time

    Pursue a challenging career as a Senior Information Security Governance, Risk and Compliance (GRC) Specialist. This advanced role requires a subject matter expert who can oversee the organization's information security program, focusing on governance, risk management, compliance, security awareness, and policy management.This senior position involves leading...

  • Information Security Governance Specialist

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia beBee Careers Full time

    Job SummaryThe Junior GRC Specialist plays a pivotal role in information security Governance, Risk Management, and Compliance engagements. This individual contributes to successful outcomes by participating in initiatives that mitigate IT risks and ensure business continuity.

  • Senior Information Security Governance Risk Compliance Specialist

    21 hours ago

    Riyadh, Ar Riyāḑ, Saudi Arabia beBee Careers Full time

    Information Security Governance PositionThis Senior Information Security Governance, Risk, and Compliance (GRC) Specialist role is responsible for leading the organization's information security program, focusing on governance, risk management, compliance, security awareness, and policy management.Key Functions:Lead Risk Assessments: Lead risk assessments...

  • Cyber Security GRC Lead

    1 week ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Foodics Full time

    1 week ago Be among the first 25 applicantsWho Are WeWe are Foodics A leading restaurant management ecosystem and payment tech provider. Founded in 2014 with headquarters in Riyadh and offices across 5 countries, including UAE, Egypt, Jordan, and Kuwait. We currently serve customers and partners in over 35 countries worldwide. Our innovative products have...