Cybersecurity Third Party Analyst

About ASMO

ASMO is a joint venture between DHL and Saudi Aramco, established to redefine the procurement and supply chain landscape. Leveraging DHL’s logistics expertise and Saudi Aramco’s extensive supply chain ecosystem, ASMO aims to set new benchmarks in the industry. The company is projected to be operational in 2025, providing integrated procurement and supply chain services across the industrial, energy, chemical, and petrochemical sectors. Initially, ASMO will focus on Saudi Aramco and its Affiliates, with long-term plans to serve all industrial sectors within Saudi Arabia and expand into the MENA region.

The Role of Cybersecurity Third Party Analyst

The Cybersecurity Third Party Analyst is responsible for managing and overseeing cybersecurity activities related to third parties throughout their lifecycle. This full-time position in Saudi Arabia ensures that all third-party organizations, including suppliers, vendors, service providers, partners, and outsourced providers, adhere to ASMO’s cybersecurity requirements. The role supports third-party cybersecurity governance, security assessments, compliance validation, risk identification, continuous monitoring, and assurance activities.

Key Responsibilities

• Conduct cybersecurity Third-Party risk assessments for new and existing third parties using approved methodologies.
• Review third-party security questionnaires, certifications, audit reports, and evidence.
• Ensure cybersecurity requirements are incorporated into third-party engagements and contracts.
• Verify third-party compliance with applicable security policies, standards, and regulatory obligations.
• Monitor critical third parties for cybersecurity posture changes, incidents, and security risks.
• Maintain an accurate inventory of third parties subject to cybersecurity oversight.
• Support the integration of third-party cybersecurity controls within the Information Security Management System (ISMS) framework.
• Support internal audits, external audits, and regulatory reviews involving third parties.

Experience Required

Candidates for this role should possess 5-10 years of relevant experience in cybersecurity, specifically within third-party risk management or a related field.

Work Type and Location

This is a full-time position based in Saudi Arabia.