Senior Cyber Security GRC Specialist
Mozn, Saudi Arabia
Job Description
Mozn is a rapidly growing and leading data science amp; product development firm based in Riyadh with a proven track record of excellence in supporting and growing the analytics ecosystem in Saudi Arabia. Mozn is a trusted analytics partner for the largest government organizations in Saudi Arabia, as well as many large corporations and startups. We are in a critical stage of scaling the company to build institutional analytics knowledge within Mozn and Saudi Arabia. It is an exciting time to work in Saudi Arabia; through Vision 2030, the rate of social and industrial change is staggering.
The senior cyber security GRC specialist will be responsible for overseeing the cybersecurity governance, risk, and compliance activities of Mozn. They will ensure that Mozn is in compliance with applicable cybersecurity regulations and standards, and will develop and maintain an effective cybersecurity risk management program. They will work closely with other departments to promote a culture of cybersecurity awareness throughout the company.
As a Senior Cyber Security GRC Specialist, your daily workload might include:
- Develop and implement cyber security policies and procedures to ensure that the company is compliant with applicable cyber security regulations and standards.
- Establish and maintain a cyber security risk management framework to identify, assess, and manage cyber security risks across the company.
- Develop and implement cyber security compliance monitoring and testing programs to ensure that policies and procedures are being followed.
- Provide training and support to employees on cyber security matters to ensure that they are aware of their responsibilities.
- Maintain relationships with regulators, external auditors, and other stakeholders to ensure that the company’s cyber security compliance and risk management practices are up to date and effective.
- Provide regular reports to senior management on cybersecurity GRC matters, including risks and compliance issues.
- Conduct cybersecurity risk assessments and audits to identify and address cybersecurity risks and compliance issues.
- Defines and documents business process responsibilities and ownership of the controls in the GRC tool. Schedules regular assessments and testing of effectiveness and efficiency of controls and creates GRC reports.
- Monitor the company’s information security risk profile and risk appetite to achieve an optimal balance between business risk and opportunities
- Develop and maintain current and complete IS risk profiles for all information systems, including software, devices, and infrastructure.
- Manage the company’s business continuity management program, including developing and implementing business continuity plans and conducting regular testing.
- Oversee third-party management activities to ensure that third-party risks are identified and managed appropriately.
- Assists other staff in the management and oversight of security program functions.
- Daily administrative tasks, reporting, and communication with the relevant departments in the company.
Requirements
Our target profile is candidates with...
- BS/MS from a top school in Computer Science, Information Systems or any related field.
- 5+ years of Cyber Security GRC experience.
- Experience developing and implementing GRC policies and procedures.
- Ability to work collaboratively with other departments and stakeholders.
- Relevant certifications in GRC, risk management, or compliance (e.g., ISO 27001 Lead Implementer/Auditor, GRC Professional, CISA, CRISC, etc.) are preferred.
- Excellent communication and interpersonal skills.
Benefits
We think you'll enjoy working at Mozn. Here's why:
- You will be at the forefront of an exciting time for the Middle East, joining an incredibly exciting technology company in the region.
- You will be given a lot of responsibility and trust. We believe that the best results come when the people responsible for a function are given the freedom to do what they think is best.
- You will enjoy flexible working conditions and a generous compensation package (including top-tier health insurance) that is aligned with individual and company performance.