Requirements
Requires a Bachelor's degree in Cybersecurity or a related field and a minimum of 4 years of experience in IT risk management, cybersecurity, operational risk management, business continuity planning, or security awareness programs.
Description
Key ResponsibilitiesContributes to analyzing and assessing risks to the Information Technology environment.Develops continuous security assessment processes for the organization's systems and services in alignment with the Technology Risk Management Framework.Contributes to activities related to analyzing and assessing risks to the Information Technology environment.Contributes to tasks related to participating in cybersecurity incident response.Establishes activities for monitoring emerging security threats and monitoring the implementation of necessary measures to mitigate risks, in coordination and alignment with Operational Risk Management, as applicable.Develops processes for reviewing the disaster response and business continuity plan, in coordination and alignment with Operational Risk Management, as applicable.Develops activities to ensure the availability of cybersecurity resilience requirements in the Business Continuity Plan.Contributes to processes for reviewing the ability of information security controls to mitigate risks and providing recommendations in this regard.Develops activities to ensure the protection of information and technology assets from cyber risks related to external parties.Develops processes for assessing the security awareness of system users.Contributes to activities related to developing plans and implementation programs to enhance security awareness, in coordination with various concerned organizational units (such as: the General Department of Human Resources and the Corporate Communications Department).Develops processes for implementing security awareness programs and working to develop them.Contributes to ensuring that security awareness programs comply with all relevant regulations, standards, and requirements of the relevant legislative authorities.Complies with the organization's policies and work behaviors and the procedures of the organizational unit.Performs any other tasks assigned by direct supervisors.Required ExperienceMinimum of 4 years of experience in a relevant field.EducationBachelor's degree in Cybersecurity or any related field.