Summary
Naseej is seeking an external expert for a 2-month project in Riyadh to carry out fieldwork for the cybersecurity and IT audit in its approved internal audit plan. The expert will test controls, collect evidence, and document results on applicable National Cybersecurity Authority controls and IT disaster recovery arrangements. Internal Audit will set the scope, supervise and review the work, and issue the report. Applicants should have at least 5 years of cybersecurity and IT auditing experience, knowledge of NCA frameworks including ECC, disaster recovery plan review experience, and CISA or an equivalent certification.
The posting
As published on naseej.com. Pulled from the employer's site and shown as they wrote it.
Company Description:
Naseej is a leading technology company committed to harnessing the power of digital transformation in learning & knowledge management by enabling our customers to provide rich experiences for their users and adapt to a dynamic technology landscape while reducing their technical burden enabling them to focus on achieving their strategic objectives. And for almost 36 years, Naseej with its branches all over the MENA region had made many contributions to be one of the market leaders in the fields of E-Learning, Edu-Tech & Digital transformation. Naseej website: https://www.naseej.com/
Job Summary:
We're looking for an external expert to carry out the execution (fieldwork) of the cybersecurity and IT audit included in the approved internal audit plan. Internal Audit will set the scope, supervise and review the work, and issue the report.
Key Responsibilities:
The expert will test the controls, collect evidence, and document the results for:
Compliance with the National Cybersecurity Authority (NCA) controls applicable to the company.
IT disaster recovery: the recovery plan, backup and restoration, and plan testing..
Requirements:
At least [5] years of experience in cybersecurity and IT auditing.
Knowledge of NCA cybersecurity frameworks, including the Essential Cybersecurity Controls (ECC).
Experience reviewing disaster recovery plans.
A recognized professional certification such as CISA, or equivalent..