Cybersecurity GRC Senior Specialist

Company Overview:

Advanced technology and cybersecurity company (sirar) established by stc, the regions ICT and digital services provider, sirar by stc is a cutting-edge cybersecurity provider that empowers organizations to take control of their cyber capabilities and digital environments. As experts in business security and privacy, we offer a comprehensive range of solutions that help you operate online safely, securely, and efficiently. The tools we provide help organizations detect and prevent cybersecurity attacks, safeguard their digital future, and provide protection and security from that point forward.

Key Responsibilities:

1. Assesses organizations' cybersecurity risks to protect its information and technology assets in line with organizational policies and procedures and related laws and regulations.
2. Ensures an organization's cybersecurity program complies with applicable requirements, policies, and standards.
3. Participates in developing and updating cybersecurity policies to support and align with an organization's cybersecurity requirements.
4. Analyzes cybersecurity controls and assesses their effectiveness.
5. Performs cybersecurity audits to assess an organization's compliance with applicable requirements, policies, standards, and controls.
6. Prepares audit reports to communicate them to authorized parties.
7. Ensures technology systems compliance with policies and standards for access control by analyzing users, authorities, threats, and vulnerabilities.
8. Participates in audit findings and recommendations to ensure that appropriate mitigation actions are taken.
9. Contributes to the overall success of the company by performing all other duties and responsibilities as assigned by line manager.

Qualifications:

1. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline.
2. Master's degree in Cybersecurity, Computer Science/Information Technology, or related discipline is preferred.

Professional Certifications Preferred:

1. Relevant certification in technology Security (CISSP, CAP, SSCP, (ISC)2, CCFP, CISM etc.) is preferred.
2. ISO 27001 Lead Implementor, Lead Auditor.

Years of Experience:

3-5 years in relevant experience.

Skills:

1. Intermediate proficiency in data collection and analysis.
2. Intermediate proficiency in reporting skills and recommending actions to be taken.
3. Intermediate proficiency in reviewing and editing cybersecurity related plans.
4. Intermediate proficiency in identifying gaps and limitations in cyber threat intelligence provision.
5. Intermediate proficiency in developing, deploying, and integrating policies that meet organizational system cybersecurity objectives.