CS Compliance Principle Expert

Select how often (in days) to receive an alert:

The role holder is responsible for supervising compliance framework updates, ensuring regulatory adherence, and conducting compliance checks and audits, establish reporting mechanisms, and provide independent assurance to management, develop a compliance calendar. The role holder shall carry out their duties in accordance with the stipulated business policies and procedures.

• Supervise stc's compliance framework updates including key procedures and stakeholders
• Maintain a list of non conform ant departments and liaise with them to help them become compliance compliant and escalate when necessary
• Ensure compliance with local regulation, continuous assessments, evidence collection and maintenance.
• Establish reporting mechanisms to ensure management oversight on compliance related matters
• Lead performing the compliance checks and security audits on stc KSA and stc group subsidiaries and 3rd parties
• Ensure providing independent assurance to management via compliance assessments by assessing the target environment and reporting the gaps to relevant cybersecurity and business stakeholders
• Develop compliance calendar for all compliance initiatives throughout the year in alignment with Group Compliance
• Ensure alignment with stc KSA Compliance function through regular reporting of compliance activities and non-compliance issues

Ensure the non compliance findings identified during security audits are treated effectively, compliance requirements are being met, and agreed security controls are being implemented within agreed timelines

• Ensure providing feedback to Governance on compliance framework to ensure it remains as per industry best practices( ISO 27001: 2013 etc.)
• Communicate of non compliance findings based on compliance assessments – covering policy, regulatory, legal findings - to stakeholders & follow up and escalate non compliance issues.
• Ensure providing stc KSA Compliance Management Department with the compliance related training needs and awareness content and where necessary support with delivery.
• Collaborate with stc KSA Compliance to provide required inputs, information, and reports to plan and validate compliance planned assessment initiatives related to the sectors
• Manage cybersecurity compliance assessments for stc group subsidiaries along with definition of cs index baseline and targets to be shared through the CSDG Enablement
• Ensure proper alignment with CSDG Enablement in regard to any topic require sharing with the stc group subsidiaries
• Ensure Firewalls are managed & operated securely in alignment with internal & external cybersecurity requirements by conducting periodic compliance checks & integrate Firewalls with supported technologies to ensure proper management in place

A minimum of 8 years

Related experience in leading the Cyber Security function for a large organization preferably within the telecom industry

STP
- Similar Director Manager

Bachelor Degree in Computer Science or Information Technology