Information Security Officer

• Planning and implementing the cyber security strategy, policy, structure and procedure of the branch.
• Managing cyber security risks.
• Managing and ensuring cyber security compliance.
• Managing cyber security operation and technology.
• Managing third party cyber security.
• Planning and organizing cyber security Awareness improving and training.
• Planning for cybersecurity budget.
• Contacting with SAMA and implement various regulatory requirements.
• Reporting to general management on cyber security management.
• Fulfilling other tasks assigned by General Manager.

Responsibilities:

• Developing and maintaining cyber security strategy, policy, architecture and cyber security risk management process for the branch.
• Ensuring that detailed security standards and procedures of the branch are established, approved and implemented.
• Delivering risk-based cyber security solutions that address people, process and technology.
• Developing the cyber security staff to deliver cyber security solutions in a business context.
• Monitoring of the cyber security activities (SOC).
• Monitoring of compliance with cyber security regulations, policies, standards and procedures.
• Overseeing the investigation of cyber security incidents.
• Gathering and analyzing threat intelligence from internal and external sourcess.
• Performing cyber security reviews.
• Conducting cyber security risk assessments on the branch's information assets.
• Proactively supporting other functions on cyber security including performing information and system classifications, determining cyber security requirements for important projects and performing cyber security reviews.
• Defining and conducting the cyber security awareness programs.
• Measuring and reporting the KRIs and KPIs on cyber security strategy, cyber security policy compliance, cyber security standards & procedures and cyber security programs (e.g., awareness program, data classification program, key cyber security improvements).
• Developing and maintaining efficient comunication channel with authorities including but not limited in SAMA, NCA, SDAIA on Cyber Security as well as data security.
• Fulfilling other related tasks assigned by general manager of the branch.

Required Qualifications:

• Proven experience in Cyber Security.
• Familiar with SAMA's cyber security and IT regulations such as Cyber Security Framework and IT Governance Framework.
• With experience working in SAMA or working as ISO in banks is preferred.
• Professional certificates such as GSEC,CISSP,CISA,CISM,GCIH,SSCP, being able to speak Chinese are preferred.
• Familiar with SAMA is preferred.