Summary
Wataniya Insurance is seeking a Cybersecurity Officer for a Tamheer role in Jeddah. The role supports cybersecurity governance, risk management and compliance, including policy implementation, risk assessments, audit preparation and tracking corrective actions. The officer also maintains GRC reports and evidence, and works with IT, Legal, business units, auditors and regulators. Applicants should have a relevant bachelor’s degree and 0–1 years of experience; ISO 27001, CISM, CRISC or similar certifications are preferred.
The posting
As published on wataniya.com.sa. Pulled from the employer's site and shown as they wrote it.
The Cybersecurity Officer is responsible for supporting the implementation and maintenance of the organization’s cybersecurity governance, risk management, and compliance framework. This role plays a critical part in operationalizing security policies, conducting risk assessments, facilitating compliance initiatives, and assisting with audits and regulatory requirements. The ideal candidate has a strong understanding of cybersecurity principles and works collaboratively with internal teams to promote a culture of security awareness and compliance.
Job Responsibilities
Governance
- Assist in the development, documentation, and implementation of cybersecurity policies, standards, and procedures.
- Ensure cybersecurity controls are embedded into business processes in coordination with relevant departments.
- Participate in policy reviews and recommend updates to reflect changing regulations and threats.
- Assists in the execution of overall cyber security strategies across multiple cyber security domains.
- Manages cyber security GRC projects within Wataniya to ensure they achieve the defined objectives.
Risk Management
- Conduct and support cybersecurity risk assessments across departments and third-party vendors.
- Monitor and update the cybersecurity risk register in coordination with the GRC Manager.
- Assist in developing risk treatment plans and tracking remediation actions.
- Support incident response exercises from a risk and documentation perspective.
Compliance
- Assist with internal and external audits, assessments, and regulatory reviews.
- Track and follow up on compliance gaps and the implementation of corrective actions.
- Maintain documentation and evidence to support regulatory and certification requirements.
- Contribute to the continuous monitoring of the organization’s compliance posture.
Collaboration and Reporting
- Collaborate with IT, Legal, and Business Units to support cybersecurity GRC initiatives.
- Prepare and maintain reports and dashboards on GRC activities for management review.
- Act as a liaison between technical teams and auditors/regulators for compliance evidence and responses.
Awareness and Improvement
- Stay current on regulatory updates, industry standards, and best practices in cybersecurity GRC.
- Contribute to awareness campaigns and training sessions on cybersecurity policies and procedures.
- Recommend improvements to GRC processes and tools.
Requirements
Educational Background and Experience:
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
- 0-1 years of experience in cybersecurity governance, risk management, and compliance.
Certifications (Preferred):
- ISO 27001 Lead Implementer or Auditor
- CISM, CRISC, or similar certification
- GRC-related tools or platform certifications