Job Description
Summary
Responsible for identifying, prioritize and respond to cybersecurity risks for the organization to protect its information assets and technology in accordance with the organization’s policies and procedures, as well as relevant laws and regulations of National Cybersecurity Authority and other related entities.
Essential Responsibilities and Duties
1. Responsible for identifying, analysing, prioritising and evaluating of Hospital’s cyber security risks and issues.
2. Ability to monitoring, reporting and communicating cybersecurity risks.
3. Capability to respond to risk and planning for mitigation.
4. Assess cybersecurity vulnerability and measurement of vulnerability.
5. Conducts vulnerability testing to identify weaknesses and collaborate with cybersecurity team to update defensive protocols as necessary
6. Conducts regularly scheduled reviews of security services quality and provide guidance on protecting the internal network from outside, Internet cyber threats.
7. Assists in developing the annual cyber security risk assessment plan.
8. Writes and delivers reports and presentations highlighting findings, identifying and explaining cybersecurity risks, and solutions.
9. Ensures that controls are operating effectively, and provide research and analytical support.
10. Shows full understanding of the cybersecurity risk framework and ability to demonstrate it.
11. Ability to assess other staff in evaluating, identifying, and mitigating cybersecurity risks
12. Follows all Hospital’s related policies and procedures.
13. Participates in self and others’ education, training and development, as applicable.
14. Performs other related duties as assigned.
Education
Master’s, or Bachelor’s Degree in Information Security, Computer Science, Information Technology, or other related discipline is required.
Experience Required
Five (5) years of related experience with Master’s, or seven (7) years with Bachelor’s Degree is required.
Other Requirements(Certificates)
- Saudi National Only.?
- CISSP or CISM or CEH or IT Risk Fundamentals certifications is preferred.?
- Certificate in Cyber Security or related field is preferred.