Cyber Security Governance Risk and Compliance (GRC) Senior Specialist

About the Role

Saudi Railway Company is seeking a Cyber Security Governance Risk and Compliance (GRC) Senior Specialist to join its Cyber Security Department in Riyadh, Saudi Arabia. This full-time position requires 5-10 years of relevant experience and focuses on providing comprehensive GRC cybersecurity support to protect the organization's information and technology assets.

Role Purpose

The primary purpose of this role is to identify, assess, and manage cybersecurity risks in alignment with organizational policies, procedures, and relevant laws and regulations. The specialist will ensure the organization's cybersecurity program complies with applicable requirements, policies, and standards, contributing to a robust security posture.

Key Responsibilities

• Provide general GRC cybersecurity support and perform various cybersecurity tasks.
• Develop, update, and maintain cybersecurity policies and associated documentation in alignment with the organization's cybersecurity strategy.
• Review existing and proposed cybersecurity policies and related documentation with stakeholders.
• Analyze cybersecurity controls and assess their effectiveness.
• Participate in cybersecurity audits to evaluate compliance with applicable requirements, policies, standards, and controls.
• Assist in preparing and communicating audit reports to authorized parties.
• Evaluate cybersecurity aspects of contracts to ensure compliance with regulatory requirements.
• Identify patterns of non-compliance with cybersecurity policies to propose documentation improvements.
• Support the review of cybersecurity strategy, policies, and related documents to maintain compliance with applicable legislation and regulation.
• Collaborate with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues.
• Assist in developing methods to effectively monitor and measure risk, compliance, and assurance efforts.
• Conduct cybersecurity risk assessments on applications, new services, and third-party services.
• Maintain knowledge of applicable cybersecurity defense policies, regulations, and compliance documents.
• Provide support for compliance activities as required.

Qualifications and Experience

• A minimum of 5 to 10 years of experience in a relevant field.
• Certification in NCA is required.
• Certification in ISO 27001 is required.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, within the Cyber Security Department of Saudi Railway Company. The role involves working collaboratively with various stakeholders to ensure robust cybersecurity governance, risk management, and compliance.