Cybersecurity GRC Specialist📣 Job Ad

About the Role

The Water Transmission Company (شركة نقل المياه), known as WTCO, is seeking a Cybersecurity GRC Specialist to join its team in Riyadh. This full-time position is central to enhancing the company's cybersecurity posture through robust governance, risk management, and compliance initiatives.

Role Purpose and Context

The Cybersecurity GRC Specialist is responsible for developing and implementing comprehensive cybersecurity Governance, Risk, and Compliance (GRC) activities. This includes formulating cybersecurity strategy and requirements, managing cybersecurity risks, ensuring regulatory adherence, and fostering a strong security culture through awareness and training programs.

Key Responsibilities

• Identify opportunities for continuous improvement in practices, cost optimization, and productivity within cybersecurity functions.
• Ensure compliance with all applicable laws, rules, regulations, and standards across WTCO and related departments (*, HC, HSSE, Risk, Cybersecurity).
• Escalate problems efficiently to ensure timely resolution of cases and issues.
• Apply cybersecurity strategy to safeguard and protect all IT operations and assets, ensuring data reliability and integrity.
• Gather information on leading practices to support the development of a cybersecurity governance framework aligned with relevant regulations and legislation.
• Develop cybersecurity policies, procedures, and a governance framework in line with applicable regulations and legislation.
• Conduct periodical reviews of cybersecurity strategy, policies, and related documents to maintain compliance with current legislation and regulation.
• Ensure the implementation of cybersecurity requirements and adherence to relevant regulations and legislation.
• Implement cybersecurity vendor assessments across WTCO and its projects.
• Manage cybersecurity risks systematically to protect WTCO's information and technical assets.
• Implement an ongoing cybersecurity risk management process to mitigate risks and propose enhancements.
• Develop WTCO's cybersecurity compliance requirements, policies, and systems, ensuring internal compliance across all WTCO functions.
• Raise employee awareness on cyber threats and ensure understanding of their cybersecurity responsibilities.
• Provide employees with necessary cybersecurity training to protect WTCO's information and technology assets and fulfill their cybersecurity responsibilities.
• Ensure cybersecurity resilience requirements are met within WTCO's business resilience management.
• Ensure the implementation of third-party and cloud computing cybersecurity requirements in accordance with WTCO's policies, procedures, and relevant regulations and legislation.

Qualifications and Education

• Bachelor’s Degree in Computer Science or a relevant field.
• Bachelor’s Degree in Information Technology or a relevant field.

Work Type and Location

This is a full-time position based in Riyadh, Saudi Arabia.

Application Information

Candidates who meet the above qualifications are encouraged to apply.