Risk Management Expert

Key Responsibilities

1. Provides advice on analyzing and assessing risks to the Information Technology environment.
2. Recommends activities related to continuous security assessments of the organization's systems and services in alignment with the Technology Risk Management Framework.
3. Recommends activities related to analyzing and assessing risks to the Information Technology environment.
4. Provides advice on participating in cybersecurity incident response.
5. Recommends actions related to monitoring emerging security threats and monitoring the implementation of necessary measures to mitigate risks, in coordination and alignment with Operational Risk Management, as applicable.
6. Reviews the disaster response and business continuity plan, in coordination and alignment with Operational Risk Management, as applicable.
7. Recommends actions to ensure the availability of cybersecurity resilience requirements in the Business Continuity Plan.
8. Identifies tasks related to the ability of information security controls to mitigate risks and provides recommendations in this regard.
9. Recommends actions to ensure the protection of information and technology assets from cyber risks related to external parties.
10. Reviews the processes for assessing the security awareness of system users.
11. Proposes activities for developing plans and implementation programs to enhance security awareness, in coordination with various concerned organizational units (such as: the General Department of Human Resources and the Corporate Communications Department).
12. Proposes activities for implementing security awareness programs and working to develop them.
13. Recommends actions to ensure that security awareness programs comply with all relevant regulations, standards, and requirements of the relevant legislative authorities.
14. Complies with the organization's policies and work behaviors and the procedures of the organizational unit.
15. Performs any other tasks assigned by direct supervisors.

Required Experience

• Minimum of 6 years of experience in a relevant field.

Education

• Bachelor's degree in Cybersecurity or any related field.