Senior Specialist, Cybersecurity Threat Management

1 week ago


Riyadh, Saudi Arabia Ma’aden Full time

**1. JOB DETAILS**:
**Position Title**:Senior Specialist: Cyber Security GRC**

**Broad Band**:M10: Professional**

**Department & Function**:Ma’aden Cyber Security**

**Talent Pipeline Layer**:Manage Self: Expert/Consultant (MS)**

**2. OVERALL JOB PURPOSE**:
**The Senior Specialist: Cyber Security GRC works across the entire Cyber Security division across Ma’aden Corporate and Affiliates in Saudi Arabia, India, Malawi, Zimbabwe, Mozambique, South Africa and Mauritius. This position is responsible for conducting technology risk assessments, control self assessments, and vendor risk assessments are carried out on a regular basis. This position is also responsible for Cyber security awareness, security performance monitoring, and status reporting as well as developing and setting up required policies and SOPs. Performs compliance and aduit activities.**

**3. QUALIFICATIONS, EXPERIENCE & SKILLS**:
**Qualification**:
**1. Bachelor degree in Computer Science or Management Information Systems with an advanced degree desirable**

**Experience**:
**1. At least 4-6 Years' relevant experience**

**Skills**:
**1. Good understanding of Cyber Security standards (ISO27001, 22301, 9001, NIST)**
**2. Good understanding of IT / OT technologies.**
**3. Information Security Certification (CISM / CISSP / ISO27001 / ISMS Lead Auditor / ISA/IEC 62443)**

**4. KEY ACCOUNTABILITIES**:
**Focus Area**

**Get results through individual expert contributions, influence & efforts**

**Operational / Functional**

**1. Risk Management**:

- **Develop a deep understanding of IT/OT Cyber Security risks and drive the response process in order to minimize the impact of these risks**:

- **Understand and explain risks and exposure to IT/OT environments.**:

- **Identify the critical assets for overall Ma'aden in the seven countries and maitain & mitigate the risk associated.**:

- **Conduct risk and threat research, keeping current with the evolving Cyber threat landscape.**:

- **Understand and incorporates Cyber risk assessments reports into Cyber risk registers for IT and OT.**:

- **Actively participate in IT/OT Cyber Security risk assessments across Ma’aden**:

- **Govern Cybersecurity risks across Ma’aden**:

- **Conduct third party and vendor risk assessment / audit programs**:

- **Support the Manager: Cyber Security GRC by contributing to the development of a comprehensive Risk Management Framework that sets the tone for assessments and threat management across Ma’aden**:

- **Support the Manager: Cyber Security GRC by contributing to the establishment of a Data Security Governance Framework, Data Risk Governance, Data privacy compliance Framework, Data privacy assessment, Cloud data privacy management**:

- **Support the Manager: Cyber Security GRC by contributing to the establishment of a Risk Intelligence center (RIC) covering Common control framework, cloud risk**

**2. Strategy, Governance & Compliance**:

- **Facilitate the execution of the Ma’aden Cyber Security Strategy across the organization**:

- **Execute governance, risk and compliance (GRC) initiatives and activities across Ma’aden**:

- **Provide input on Cyber Security policies, standards, procedures and the Unified Control Frameworks (UCF)**:

- **Ensure continous and peridical review of all governance related in terms of policies, processes, frameworks and controls.**:

- **Communicate GRC objectives to ensure appropriate compliance and risk aware culture**:

- **Provides IT/OT Cyber Security consultation to stakeholders across Ma'aden in Saudi Arabia, India, Malawi, Zimbabwe, Mozambique, South Africa and Mauritius**

**1. Consistently deliver solutions which contribute to business results and improved competitiveness (consulting advice, business options)**
**2. Deliver quality solutions/ service cost effectively on time and within risk parameters**
**3. Provide advice that are generally accepted and implemented on programmes and systems, creating a competitive advantage for organization, leading to quality results**
**5. Deliver Cost effective results**
**6. Risk results**
**7. HSE targets**
**8. Conduct Research & Development that leads to new solutions being implemented in the organization**

**Leadership**

**1. Capability building**:

- **Builds awareness of IT/OT Cyber Security governance areas through Training & awareness**:

- **Subject Matter Expert in IT/OT Cyber Security Coaching, Problem solving, and Risk Management tools and techniques**

**2. Quality Assurance**:

- **Develop a Cyber Security awareness, training program and related strategy for users across Ma’aden**:

- **Provide Quality Assurance & Compliance advice and services to improve service delivery performance and enhance customer satisfaction**:

- **Conduct internal audits to check compliance of IT/OT Cyber Security standards, and propose plans to close gaps as part of the Internal & External Audit “Non-Conformance (NC)” and Observations closure process**:

- **Coordina



  • Riyadh, Saudi Arabia Ma'aden Aluminium Full time

    **Position Title & Grade**: | “Senior Specialist, OT Cybersecurity” **Reports to**: | “OT Cybersecurity Manager” **Department & Function**: | Department: Central Engineering & Project Function **Location**: Ras Al Khair, Saudi Arabia **OVERALL JOB PURPOSE**: The OT Cybersecurity Specialist works with OT/ICS SMEs and operational staff to design,...

  • Cybersecurity Analyst

    2 months ago


    Riyadh, Saudi Arabia EMGS Full time

    We are seeking a highly skilled and dedicated Cybersecurity Analyst with expertise in threat detection, incident response, and security framework implementation to join our dynamic and security-focused team. As a Cybersecurity Analyst, you will play a critical role in safeguarding our systems, detecting potential threats, and implementing robust security...


  • Riyadh, Saudi Arabia Management Recruitment Group Full time

    **Role and Responsibilities**: - Planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization’s data, systems, and networks. - Troubleshooting security and network problems. - Responding to all system and/or network security breaches. - Ensuring that the organization’s data and infrastructure are...


  • Riyadh, Ar Riyāḑ, Saudi Arabia PSDSARC Full time

    Identifies, analyzes, monitors, mitigates and manages threats and vulnerabilities to IT systems and networks.Uses defensive measures and multi-source information to report events and respond to incidents.Uses data collected from cyber defense tools to analyze events that occur within their organization to detect and mitigate cyber threats.Performs...


  • Riyadh, Ar Riyāḑ, Saudi Arabia GRC Trading Est. Full time

    We are excited to announce an exceptional opportunity for a talented and experienced Cybersecurity and Networks Specialist to join our team for Aramco project. This is a high-profile position that involves handling cybersecurity configuration, network configuration, and addressing the day-to-day cybersecurity and network needs of our...


  • Riyadh, Saudi Arabia Ma’aden Full time

    **1. JOB DETAILS**: **Position Title**:Senior Specialist, Security Device Management** **Broad Band**:M10: Professional** **Department & Function**:Ma’aden Cyber Security** **Talent Pipeline Layer**:Manage Self: Expert/Consultant (MS)** **2. OVERALL JOB PURPOSE**: **Senior Specialist is responsible of implementing, managing and maintaining...


  • Riyadh, Ar Riyāḑ, Saudi Arabia SolveCube Full time

    SolveCube is an intelligent marketplace platform for CXOs and CXO-2 Level experts. SolveCube is working with global consulting firms, PE/VC firms, startups, mid and large enterprises across APAC and GCC to fulfil their talent needs for short-term, part-time, interim, permanent and turnkey assignments.These are short term assignment contract for duration of...


  • Riyadh, Saudi Arabia Innovative Solutions Full time

    **Company Description**: Innovative Solutions (IS) is a leading pure-player Cybersecurity company established in 2003. With headquarters in Riyadh and presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi, our mission is to bring trust to cyberspace and ensure your business is secured. We offer a wide range of cybersecurity solutions and services including...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Management Recruitment Group Full time

    Role and Responsibilities: Planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization's data, systems, and networks. Troubleshooting security and network problems. Responding to all system and/or network security breaches. Ensuring that the organization's data and infrastructure are protected by...


  • Riyadh, Saudi Arabia JASARA PMC Full time

    JASARA Program Management Company, a joint venture between Public Investment Fund (PIF), Jacobs, and Saudi Aramco, is looking for a Cybersecurity Sr. Manager to join our team. As part of the Civil Engineering industry, JASARA offers an opportunity to work on the most exciting and complex programs in the world and bring visible change within the Kingdom of...


  • Riyadh, Saudi Arabia Professional Recruitment Full time

    **Responsibilities** - Developing a cybersecurity operations strategy and aligning it with cybersecurity strategies - Supervising the tasks and responsibilities carried out by the cybersecurity operations team and evaluating performance. - Develop, build and implement cyber incident response plans and ensure effective response to cyber security incidents -...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Innovative Solutions Full time

    Company Description:Innovative Solutions (IS) is a leading pure-player Cybersecurity company established in 2003. With headquarters in Riyadh and presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi, our mission is to bring trust to cyberspace and ensure your business is secured. We offer a wide range of cybersecurity solutions and services including advisory...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Professional Recruitment Full time

    Responsibilities Developing a cybersecurity operations strategy and aligning it with cybersecurity strategies Supervising the tasks and responsibilities carried out by the cybersecurity operations team and evaluating performance. Develop, build and implement cyber incident response plans and ensure effective response to cyber security incidents Managing...


  • Riyadh, Ar Riyāḑ, Saudi Arabia SIFI Full time

    ResponsibilitiesSecurity Architecture and Implementation:Design, review, and implement robust security architecture for SiFi infrastructure.Provide guidance and support to the IT team on security-related issues.Develop and monitor Identity and access management programs.Manage and optimize security solutions like Antivirus, EDR, PAM, and VPN.Develop and...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Oivan Group Oy Full time

    What We Need:Oivan is looking for a Cybersecurity Specialist with at least 3 years of experience in cybersecurity governance, risk, and compliance to help our clients in securing their digital services. If you are interested in joining an awesome team of cybersecurity with Nordic values, then Oivan is the right place for you _This is a hybrid position, where...


  • Riyadh, Saudi Arabia Objectives Recruitment Full time

    **Job Summary** A senior cybersecurity engineer is well versed in the market and field. Has a strong passion and interest in the field of cybersecurity. A fast learner who keeps up to date on the trends in the field. Able to work at client sites and in our office. Able to meet project deadlines on time. **Responsibilities**: - Data/Device Integration -...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Cyber Recruit Solutions Full time

    Job Summary:Key Responsibilities: Conduct regular assessments of our company's information systems and networks to identify vulnerabilities and potential threats Develop and implement cybersecurity policies and procedures to protect our systems and data Monitor network activity and analyze logs to identify suspicious activity and potential breaches...


  • Riyadh, Saudi Arabia SolveCube Full time

    **SolveCube** is an intelligent marketplace platform for CXOs and CXO-2 Level experts. SolveCube is working with global consulting firms, PE/VC firms, startups, mid and large enterprises across APAC and GCC to fulfil their talent needs for short-term, part-time, interim, permanent and turnkey assignments. **These are short term assignment contract for...


  • Riyadh, Saudi Arabia SolveCube Full time

    **SolveCube** is an intelligent marketplace platform for CXOs and CXO-2 Level experts. SolveCube is working with global consulting firms, PE/VC firms, startups, mid and large enterprises across APAC and GCC to fulfil their talent needs for short-term, part-time, interim, permanent and turnkey assignments. **These are short term assignment contract for...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Maaden Saudi Arabian Mining Company Full time

    1. JOB DETAILS:Position Title: Senior Specialist, Security Device ManagementBroad Band: M10: ProfessionalDepartment & Function: Ma'aden Cyber SecurityTalent Pipeline Layer: Manage Self: Expert/Consultant (MS)2. OVERALL JOB PURPOSE:Senior Specialist is responsible of implementing, managing and maintaining Cybersecurity related infrastructure and devices. The...