Cybersecurity GRC Specialist

Select how often (in days) to receive an alert:

Water Transmission and Technologies Company

Riyadh - HQ

Cybersecurity GRC Specialist

The job holder is responsible for developing of cybersecurity GRC activities by developing cybersecurity strategy and requirements, implementing cybersecurity risk & compliance mgmt., raising awareness on cyber threats, and providing cybersecurity training.

• Identify opportunities for continuous improvement, practices, cost optimization, and productivity & efficiency improvement.
• Ensures compliance with all applicable laws, rules, regulations, and standards within WTCO and related functions such as but not limited to (HC, HSSE, Risk, Cybersecurity, etc..).
• Escalate problems to ensure case/issue is closed efficiently and in a timely manner.
• Ensure applying cybersecurity strategy to safeguard and protect all IT operations and assets to ensure the reliability and integrity of data.
• Ensure gathering information related to leading practices to support in the development of cybersecurity governance framework in line with relevant regulations and legislation.
• Develop cybersecurity policies and procedures, and governance framework in line with the relevant regulations and legislation.
• Develop the periodical review on cybersecurity strategy, policies, and related documents to maintain compliance with applicable legislation and regulation.
• Develop cybersecurity requirements are implemented, and that relevant regulations and legislation are adhered to.

• Ensure developing cybersecurity vendor assessment is implemented across WTCO and projects.
• Ensure that cybersecurity risks are managed in a systematic manner aimed at protecting the information and technical assets of WTCO.
• Ensure implementing cybersecurity risk management process on an ongoing basis to mitigate risks and propose enhancements.
• Develop WTCO's cybersecurity compliance requirements, policies and systems, and ensure internal compliance across WTCO's functions.
• Raise employee’s awareness on cyber threats and ensure that they are aware of their cybersecurity responsibilities.
• Provide the employees with the required training in the field of cybersecurity to protect the information and technology assets of WTTCO and to fulfill their responsibilities towards cybersecurity.
• Ensure meeting the requirements of cybersecurity resilience in WTCO's business resilience management.
• Ensure the implementation of third-party and cloud computing cybersecurity requirements in accordance with WTCO's policies & procedures, and the relevant regulations and legislation.

Bachelor’s in Computer Science or Relevant fields

Bachelors in Information Technology or Relevant fields

Internal Stakeholders

• All Departments

External Stakeholders

• Consultants/Contractors
• Government authorities and entities

The above job description is meant to describe the general nature and level of work being performed; it is not intended to be constructed as an exhaustive list of all responsibilities, duties, and skills required for the position. Accordingly, there is no way this Job Description states or implies that these are the only duties to be performed by the employee in this position.

Employees will be required to follow any other job-related instructions and to perform other job-related duties.