Summary
NEOM is hiring a Technical and Regulatory Compliance Associate for its Tech & Digital/Tonomus organization in NEOM, Saudi Arabia. The role assesses and reports on regulatory and security compliance across products, technologies and integrated systems, and supports automated compliance processes and control libraries. It also coordinates remediation and audit findings with product, operations, management and audit teams. Applicants need a bachelor's degree in a related field and at least five years in IT security, including three years in compliance management; relevant cybersecurity qualifications and certifications are requested.
The posting
As published on neom.com. Pulled from the employer's site and shown as they wrote it.
| Job Code | | Reports to | | Direct Reports | | Division/Section | CIO | Department | | Sector | Tech & Digital/Tonomus | Job Family | | | Ensure complete understanding of the Regulatory and Technical Compliance for NEOM and T&D and ensure compliance to regulatory requirements for the T&D Organization and all in scope Products and Services. Conduct in-depth Compliance Assessments and Reporting across multiple Products, Technologies and integrated technology ecosystems across T&D. Participate in the development of automated Compliance processes, operationalize compliance assessments and compliance reporting capabilities for NEOM-wide compliance posture (Regulatory, CS Standards and Maturity). Monitor and ensure compliance with new regulatory requirements, information system security policies and procedures. Ability to engage and influence different levels of industry stakeholders to steer T&D Technology requirements towards practical implementation of security compliance requirements. Work towards implementing the appropriate platforms to operationalize Compliance Automation across T&D working with the GRC Management team. Provide security controls adequacy & effectiveness in relation to threat & risk posture and map to Unified Compliance Library of controls. Support in maintain and Update the Unified Controls Library to reflect all Technology, Regulatory and other Compliance Requirements on a cyclical and need basis. Ensure near real-time standards, policies, MBSS & UCCL compliance through effective automation. Apply a working knowledge of global information security regulations, Local Saudi Cybersecurity regulations, and policies to articulate customer and control impact and drive alignment to T&D Policies and Standards. Ability to devise and execute creative solutions to compliance and security issues especially in a highly evolving and multi-technology environment. Implement continuous improvements to the security organization and the program management process. Share compliance management process frameworks, tools, and best practices that can be adopted throughout the organization. Drive process improvement and control implementation projects in coordination with T&D Product and Operations teams. This includes the resolution of audit findings and the execution of projects originated from new requirements or guidance from Local Regulators and International Standards and Best Practices. Dive deep into the T&D Cyber control environment to develop technical understanding of control implementation and articulate compliance implications to internal and external audit functions. Identify opportunities to engage and influence upcoming requirements, policies, and guidance via conferences, working groups, trade groups, etc. Communicate requirements effectively to partner and service teams to provide clarity needed to drive remediation, utilizing meetings, briefings, and escalations to support program activities. Liaise with auditors, articulate control implementation and impact, and describe considerations for applying security and compliance concepts to a technical cloud environment. | 5+ years working in IT Security, of which 3 years must be related to compliance management activities. Experience working closely with senior management and project management during planning and achieving strategic business objectives. In-depth knowledge of information- and cybersecurity industry's standards and regulations. Experience with latest technologies for the management and exchange of cybersecurity information. Experience working with innovation, co-creation, and partner collaboration. Certified compliance professional is a plus. Experience working with the Middle Eastern culture is a plus. Advanced degree in related area of study (Business, Cyber Security, IT Security Management). Relevant certification (i.e., CISA, CISM, CISSP, PMP, Cloud Security certifications) Have a record of delivery of IT process improvement projects with technology processes and/or major tech companies. IT process consulting is a plus. Ability to investigate and analyze technical and regulatory issues with applicability to T&D Products and Services Have a detailed knowledge of NIST 800-53/800-37, CNSSI 1253, SOC1, SOC 2, PCI, or ISO 27001 standards, KSA NCA (ECC, CSCC, OTCC etc.), CITC, NDMO Regulations | Bachelor's Degree in Computer Science, Computer Engineering, or related topic. Appropriate Cybersecurity Qualifications