IS Governance Analyst

Duties:

Job Purpose:

Provide technical and professional expertise to the IT department and other Sadara Business Functions for Information Security Governance, Strategy planning for Information Security (IS) enterprise wide, Information Security Risk Management and Compliance with Rules, Regulations and business requirements with associated enforcement and Information Security Awareness to assure defined secure level of Information Security behaviors in Sadara culture is achieved.

Functional Duties:

-Develop Information Technology (IT)/ Operation Technology (OT) governance framework from Information Security Management System perspective.

-Develop Information Security Policies, Guidelines and Standards.

-Develop Information Security Processes, Standard Operation Procedures (SOPs) and Minimum Security Baselines (MSBs).

-Alignment with policies and requirements from IT and the business, industry standards and best practices for both IT and OT.

-Develop, Implement and monitor Risk Management Methodology.

-Conduct Business Impact Analysis (BIA) and build Risk Register.

-Identify, analyze and provide recommendations on risk landscape, risk posture and mitigation plans.

-Evaluate and review business solutions/services from Information Security perspective.

-Participate in Change Management Advisory Board (CAB) meetings to review and reflect on Information Security Compliance for all changes (Normal and Urgent).

-Provide Information Security requirements and assure related rules and regulations compliance for systems/services acquisitions, development and maintained.

-Develop, Implement and verify effectiveness of Information Security Awareness programs and campaigns.

-Managements of Information Security Projects.

-Perform job related activities requested by line supervisors/manager.

Managerial Duties:

N/A

Education:

Essential: Bachelor degree in Computer Science, Computer Engineering or Information Management Systems.

Certification:

Years of Experience: 3