Information Security Manager

About the Company

Responsibilities

• ● Data Security
• ● Manage all activities related to the implementation of JCDC data security strategy to ensure alignment with business strategy.
• ● Manage all activities related to development and enforce data security procedures, general instructions, and admin procedures in line with JCDC goals and compliance requirements.
• ● Manage and respond to data security incidents, including conducting post-incident analysis and implementing preventive measures to avoid future occurrences.
• ● Manage Collaboration with cross-functional teams to protect a defined data asset inventory.
• ● Manage Collaboration with all internal departments to ensure data security best practices are integrated throughout the organization.
• ● Manage all activities related to training and awareness programs execution to educate employees on data security practices and the importance of protecting classified information.
• ● Manage all activities related to the selection and implementation of data security tools and technologies to enhance our security posture.
• ● Manage all activities related to Monitor industry trends, threats, and best practices in data security to keep our policies and procedures up to date.
• ● Provide expert advice and guidance on data security matters to senior management and other key stakeholders.
• ● Identity and Access Management
• ● Manage Collaboration with data owners to define and establish access controls for classified data resources.
• ● Manage all activities related to conduct and coordinate reviews of access controls and permissions for classified data resources.
• ● Manage all activities related to the process for granting, modifying, and revoking access to data resources, ensuring that these actions are performed in line with established policies and are authorized by the respective data owners.
• ● Manage all activities for approvals for identity and access Management requests for database, dataset, USB, SAP, cloud drives, e-vaults, internet URL access, Data Loss Prevention (DLP), and Rights Management Services (RMS) to prevent data breaches.
• ● Manage all activities related to monitor user access review activities across JCD data systems.
• ● Data Privacy
• ● Manage all activities related to the development and implementation of processes for efficiently handling data subject requests, such as access, rectification, deletion, etc...
• ● Manage Collaboration with all departments to ensure data privacy best practices are integrated throughout the organization.
• ● Manage all activities related to monitoring the implementation of the provisions of the Law and its Implementing Regulations and manage requests related to Personal Data following the provisions of the Law and its Implementing Regulations in collaboration with the cyber security GRC.

Requirements

• ● Minimum Qualifications:
• ● Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or any related field from a reputable university. (Master's degree preferred)
• ● One or more of the following qualifications are highly desirable:
• ● Certified Information Security Manager (CISM)
• ● Certified Information Systems Security Professional (CISSP)
• ● Minimum Experience:
• ● years of experience in a similar field - 3 years in managerial role.
• ● Job-Specific Skills (Generic / Technical):
• ● Solid knowledge in information security, independently executes tasks and solves routine challenges.
• ● Solid knowledge of Data Information Security.
• ● Excellent use of English (must) and Arabic language (preferred).
• ● Excellent verbal and written communication and presentation skills, with the ability to effectively present information.
• ● Proficiency in using Microsoft Office Suite (Word, Excel, PowerPoint, and Outlook)
• ● Ability to quickly learn and adapt to new technology tools and software used within the organization.
• ● Demonstrates understanding of the cultural and professional environment in KSA and the GCC region.
• ● Good understanding of relevant market practices and applicable laws & regulations, with the ability to interpret and apply knowledge to ensure compliance
• ● Proficient in essential technical skills related to the role, including knowledge of industry-specific tools, software, and methodologies, enabling effective task execution.
• ● Demonstrate proficiency in essential soft skills as per JCDC Competency Framework based on the role's level of responsibility.