Security & Risk Management Senior Specialist (2023639)

Role Overview

Security & Risk Management Senior Specialist at Nahdi (reference 2023639).

Role Purpose

Assist in the implementation of IT policies, procedures, standards, and regulations to mitigate IT risk, ensure proper execution of required risk measures, and oversee business continuity and disaster recovery planning.

Key Responsibilities

Risk Assessment & Analysis

• Conduct regular risk assessments to identify potential security threats and vulnerabilities within IT infrastructure.
• Analyze the potential impact of identified risks on business operations and data integrity.
• Report identified risks to reach solutions and resolution.

Security Policy & Compliance

• Develop and maintain comprehensive security policies and procedures in line with industry standards and regulatory requirements.
• Ensure compliance with security policies across all IT systems and departments.
• Implement measures to safeguard sensitive customer and company data.
• Stay updated on the latest data protection regulations and ensure organizational compliance.

Incident Response & Monitoring

• Monitor IT systems and networks for security breaches or intrusions.
• Lead and coordinate the response to security incidents, including investigation, documentation, and resolution.

Security Awareness & Training

• Conduct regular training sessions for staff on cybersecurity best practices and awareness.
• Increase staff awareness and response to IT policies.
• Develop materials and resources to promote a culture of security awareness within the organization.
• Support implementation of security solutions to enhance security posture.

Security Infrastructure & Vendor Management

• Support the implementation of security solutions and tools.
• Oversee the installation and configuration of security software and hardware operations with vendors and third parties.
• Assess and manage risks associated with third-party vendors and service providers, particularly those handling sensitive data.

Business Continuity & Disaster Recovery

• Contribute to the development and maintenance of business continuity and disaster recovery plans.
• Ensure that IT security considerations are integrated into these plans.

Reporting & Documentation

• Prepare regular reports on the status of IT security and risk management initiatives.
• Document all security breaches and assessments, maintaining clear and comprehensive records.

Qualifications & Experience

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3+ years of experience in information security, risk management, or a similar role.
• Relevant professional certifications such as CISSP, CISM, or CRISC.

Skills & Competencies

• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• English language proficiency.
• Arabic language proficiency.

Additional Information

• Work environment: 100% indoors.
• Schedule: 5 working days per week with 2 days off.
• Working hours: 8:00 AM – 5:00 PM with 1 hour break.