Cyber Strategy - #16620


Date: 3 weeks ago
City: Riyadh
Contract type: Full time

Location: Riyadh, Saudi Arabia

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent and innovation led company with 738,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology with unmatched industry experience, functional expertise and global delivery capability. We are uniquely able to deliver tangible outcomes because of our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Accenture Song. These capabilities, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients succeed and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities. Visit us at

Accenture Technology

We provide innovative services that span Cloud; systems integration and application management; security; intelligent platform services; infrastructure services; software engineering services; data and artificial intelligence. We also deliver it at speed and at scale through our Advanced Technology Centers.

We continuously innovate our services, capabilities and platforms through early adoption of new technologies such as blockchain, robotics, 5G, quantum computing and edge computing.

Responsibilities and Accountabilities


  • Develop cyber frameworks, policies, processes, procedures, guidelines, and related documentation.

  • Review existing and proposed policies and related documentation with stakeholders.

  • Develop reporting metrics, KPIs, and dashboards.

  • Monitor how effectively cybersecurity policies, principles and practices are implemented in the delivery of planning and management services.

  • Ensure that cybersecurity workforce management policies and processes comply with legal and organizational requirements.

  • Interpret and apply applicable laws, statutes and regulatory documents to ensure they are reflected in the cybersecurity policies.

  • Provide policy guidance to cybersecurity management, staff and users.

Risk Management

  • Effectively communicate Cybersecurity risks and posture to senior management.

  • Develop risk mitigation strategies to effectively manage risk in accordance with organizational risk appetite.

  • Ensure that decisions relating to Cybersecurity are based on sound risk management principles.

  • Perform risk analysis whenever an application or system undergoes a major change.

  • Provide input to the risk management framework and related documentation.

  • Ensure Cybersecurity risks are identified and managed appropriately through the organization's risk governance process.

  • Carry out a Cybersecurity risk assessment.

  • Work with others to implement and maintain a Cybersecurity risk management program.

  • Identify and assign individuals to specific roles associated with the execution of the Risk Management Framework

  • Establish a risk management strategy for the organization that includes a determination of risk tolerance.

  • Conduct an initial risk assessment of stakeholder assets and update the risk assessment on an ongoing basis.

  • Work with organizational officials to ensure continuous monitoring tool data provides situation awareness of risk levels.

  • Use risk management related tools such as eGRC and monitoring tools to assess risks.

  • Develop methods to effectively monitor and measure risk, compliance, and assurance efforts.

  • Determine and document supply chain risks for critical system elements, where they exist.

Compliance & Regulation

  • Analyze the organization's Cybersecurity policies and configurations to evaluate compliance with regulations and organization compliance frameworks.

  • Recognize patterns of non-compliance with Cybersecurity policies and related documentation to identify ways to improve the documentation.

  • Periodically review Cybersecurity strategy, policies, and related documents to maintain compliance with applicable legislation and regulation.

  • Work with stakeholders to resolve Cybersecurity incidents and vulnerability compliance issues.

  • Develop methods to effectively monitor and measure risk, compliance, and assurance efforts.

  • Develop specifications to ensure that risk, compliance, and assurance efforts conform with Cybersecurity requirements.

  • Monitor and evaluate a system's compliance with Cybersecurity, resilience, and dependability requirements.

  • Develop Cybersecurity compliance processes and audits for services provided by third parties.

  • Maintain knowledge of applicable legislation, regulation, and accreditation standards and regularly review these to ensure continued organizational compliance.

  • Cooperate with relevant regulatory agencies and other legal entities in any compliance reviews or investigations.

Skills and Qualifications

  • Excellent communication (written and oral) and interpersonal skills
  • Ability to work creatively and analytically in a problem-solving environment.
  • Flexibility to travel.
  • Consulting, stakeholder engagement and relationship management skills.
  • Fluent in Arabic and English language
  • Ability to effectively communicate insights relating to an organization’s threat environment to improve its risk management posture.
  • Ability to work with the organization's leadership to provide a comprehensive, organization wide approach to address Cybersecurity risk and compliance.
  • Ability to work with the organization's leadership to develop a risk management strategy to address Cybersecurity related risks.
  • Ability to develop and maintain Cybersecurity policies, standards and related documentations to support business strategy and maintain compliance with legislative, regulatory, and contractual obligations.
  • Ability to communicate technical and planning information at the same level as a stakeholder’s understanding.
  • Knowledge and understanding of risk assessment, mitigation, and treatment methods.
  • Knowledge of relevant Cybersecurity aspects of legislative and regulatory requirements, relating to ethics and privacy.
  • Knowledge of Cybersecurity threats and vulnerabilities posed by new technologies and malicious actors.
  • Knowledge and understanding of risk assessment, mitigation, and management methods.
  • Knowledge of the likely operational impact on an organization of Cybersecurity breaches.
  • Knowledge of national Cybersecurity laws and regulations such as SAMA CSF, NCA ECC, etc.
  • Knowledge of common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, etc.

Preferred Qualifications

  • Bachelor’s degree in information security, Cybersecurity or relevant.
  • Should be Certified in CRISC, GRCP, ISO 27001 LI or equal certifications.

Why join us?

  • We offer a transparent, fast paced approach career progression, with a focus on your strengths and continuous coaching from senior colleagues.
  • You will benefit from working alongside Accenture experts who are solving some of the biggest industry challenges with innovative thinking and pioneering tools.
  • Flexible work arrangements and a range of benefits including competitive rewards.
  • You will have access to state-of-the-art technology that will give you the opportunity to deepen your existing skills even as you help create the latest business trends.
  • You will also have opportunities to make a difference to the communities in which we work and live.

Next Steps

If this sounds like the ideal role, career and company for you, click below to apply.

To learn more about life @AccentureMiddleEast, follow us on social media and keep up with our

Latest news. Accenture Middle East: LinkedIn, Instagram, Facebook, Twitter, YouTube

How to apply

To apply for this job you need to authorize on our website. If you don't have an account yet, please register.

Post a resume

Similar jobs

PS SW Engineer

NCR Atleos, Riyadh
5 hours ago
About NCR NCR Corporation (NYSE: NCR) is a leader in transforming, connecting and running technology platforms for self-directed banking, stores and restaurants. NCR is headquartered in Atlanta, Ga., with 38,000 employees globally. NCR is a trademark of NCR Corporation in the United States and other countries. tb Offers of employment are conditional upon passage of screening criteria applicable to the...

Strategy Director - Government/Public Sector

Robert Walters, Riyadh
18 hours ago
Robert Walters is collaborating with a prestigious government organisation working on key matters that are central to the development of Saudi Arabia. The client is looking for core strategy professional coming from top tier (tier 1) consulting background in order to expand their strategy teams. Requirements: Must have a Bachelor’s degree Minimum 7 years of experience overall Experience working in...

Pastry Sous Chef

Marriott International, Inc, Riyadh
1 day ago
Job Number 23214323 Job Category Food and Beverage & Culinary Location JW Marriott Hotel Riyadh, King Fahad Road, Riyadh, Saudi Arabia, Saudi Arabia VIEW ON MAP Schedule Full-Time Located Remotely? N Relocation? Y Position Type Management JOB SUMMARY Accountable for overall success of the daily kitchen operations. Exhibits culinary talents by personally performing tasks while leading the staff and managing...