Security & Risk Management Senior Specialist

Job Overview

This role involves supporting the implementation of IT governance through policies, procedures, standards, and regulations aimed at mitigating IT risks. The incumbent will ensure the effective execution of business continuity and disaster recovery strategies.

Key Responsibilities

• Perform periodic risk assessments to detect potential IT security threats and weaknesses.
• Evaluate the implications of identified risks on business continuity and data security, and communicate findings to propose viable resolutions.
• Continuously monitor IT infrastructures for security intrusions and coordinate the response process including investigation, documentation, and mitigation of incidents.
• Formulate and keep security policies updated to comply with both industry best practices and relevant regulatory frameworks, ensuring adherence throughout IT systems and departments.
• Implement safeguards to protect sensitive corporate and customer data, stay informed on evolving data protection laws, and guarantee organizational conformity.
• Deliver cybersecurity training to personnel to enhance awareness and compliance with IT policies.
• Create educational materials to foster a secure culture within the organization.
• Assist in deploying security solutions and tools to strengthen organizational cyber defenses.
• Manage installation and configuration of security hardware and software, collaborating with vendors and third parties; evaluate and mitigate risks linked to these external providers, especially those handling confidential data.
• Contribute to developing and maintaining plans for business continuity and disaster recovery, embedding IT security considerations.
• Compile regular reports on IT security status and risk management efforts, maintaining thorough documentation of security incidents and evaluations.

Work Environment

• Primarily indoor work (100%) with no outdoor exposure.
• 5 working days per week with 2 days off.
• Working hours: From 8:00 AM to 5:00 PM including a 1-hour break.

Job Qualifications

• Bachelor's degree in Computer Science or related IT fields such as Cybersecurity.
• Minimum of 3 years' experience in information security, risk management, or comparable roles.
• Relevant certifications like CISSP, CISM, or CRISC strongly preferred.
• Proficient analytical and problem-solving capabilities.
• Excellent communication and interpersonal skills.
• Fluency in both English and Arabic languages.