Risk Analyst

Comply with SABIC framework & Policies and process in discharging technical and nontechnical duties.

Ensures the identification, assessment and management of the risk related to the enterprise value in the use of IT.

Define, manage and continuously improve IT security risk management methods, framework and tools to help ensure consistent and effective risk decisions.

Implement and maintain the IT security risk management process, the supporting tools and knowledge repositories.

Collect, identify, analyze and communicate the threats, vulnerabilities and incidents information with relevant parties.

Provide subject matter expertise to identify current and projected risk associated with changes in the business strategy and environment.

Collect, categorize and report the enterprise exposure to risk while aligning to the business strategy and managing risk cost-effectively.

Contribute to the effective management of the security risk register.

Play key role within the IT Security and Risk Management and lead strategic InfoSec programs to meet customer requirements.

Involve in the major IT Assurance program across the organization as Information Risk Manager and Cyber Security expert.

Information Risk Management Policy implementation and monitoring.

Compliance and remediation assurance work.

SME for IT Audits within the Business Unit.

Project reviews from an InfoSec and Cyber point of view from the inception stage.

Setting up cybersecurity metrics and cybersecurity requirements within the SDLC in RSi.

Information Security Management in both premises and in the cloud.

Information Security Metrics reporting for the Business Unit.

Lead on the implementation and monitoring of the Information Risk Management Policy.

IT Security Policy and Standard implementation.

Desired Candidate Profile

Skills needed:

Risk Analyst with the listed qualifications:

Minimum 7+ years of Experience in Risk assessment.

CISM Certified

CRISK

SABSA foundation is Plus (Aim to complete in the first 3-6 Months during the probation period).

Employment Type

Full Time

Company Industry

• IT - Software Services

Department / Functional Area

• Software Development
• Application Development (IT Software)