مسؤول الأمن السيبراني

The Cybersecurity Officer is responsible for supporting the implementation and maintenance of the organization’s cybersecurity governance, risk management, and compliance framework. This role plays a critical part in operationalizing security policies, conducting risk assessments, facilitating compliance initiatives, and assisting with audits and regulatory requirements. The ideal candidate has a strong understanding of cybersecurity principles and works collaboratively with internal teams to promote a culture of security awareness and compliance.

Job Responsibilities

Governance

• Assist in the development, documentation, and implementation of cybersecurity policies, standards, and procedures.
• Ensure cybersecurity controls are embedded into business processes in coordination with relevant departments.
• Participate in policy reviews and recommend updates to reflect changing regulations and threats.

• Assists in the execution of overall cyber security strategies across multiple cyber security domains.
• Manages cyber security GRC projects within Wataniya to ensure they achieve the defined objectives.

Risk Management

• Conduct and support cybersecurity risk assessments across departments and third-party vendors.
• Monitor and update the cybersecurity risk register in coordination with the GRC Manager.
• Assist in developing risk treatment plans and tracking remediation actions.
• Support incident response exercises from a risk and documentation perspective.

Compliance

• Assist with internal and external audits, assessments, and regulatory reviews.
• Track and follow up on compliance gaps and the implementation of corrective actions.
• Maintain documentation and evidence to support regulatory and certification requirements.
• Contribute to the continuous monitoring of the organization’s compliance posture.

Collaboration and Reporting

• Collaborate with IT, Legal, and Business Units to support cybersecurity GRC initiatives.
• Prepare and maintain reports and dashboards on GRC activities for management review.
• Act as a liaison between technical teams and auditors/regulators for compliance evidence and responses.

Awareness and Improvement

• Stay current on regulatory updates, industry standards, and best practices in cybersecurity GRC.
• Contribute to awareness campaigns and training sessions on cybersecurity policies and procedures.
• Recommend improvements to GRC processes and tools.

Requirements

Educational Background and Experience:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 0-1 years of experience in cybersecurity governance, risk management, and compliance.

Certifications (Preferred):

• ISO 27001 Lead Implementer or Auditor
• CISM, CRISC, or similar certification
• GRC-related tools or platform certifications