ES GRC Lead

Job Purpose
 

• Develop Security processes and Assure technology and business compliance to policies security standards. Enhance ES Governance frameworks, which include processes management and audits. ES Risk mentoring along with security demand assessment.

Job Description : 

• Assess ES security demand to ensure information security alignment and risk mitigation based on GRC framework 
• Lead Information security Risks monitoring and governance for identified risks and its mitigation efforts 
• Develop and maintain security standards, policies, procedures and guidelines at the Technology and Business level and ensure they comply with accredited standards. 
• Managing Process development and improvement workshops. 
• Develop Security processes plans & Design and implement process improvements. 
• Ensure that appropriate frameworks exist and are aligned with relevant security standards to identify, assess, mitigate, manage, communicate and monitor ES- related business risks. 
• Ensure implementation of security policies, controls and their compliance and escalate critical security events, if necessary Helps resource owners and technology staff responding to security audit failures reported by auditors. Conduct regular and adhoc security checks. 
• Track and report on action plans derived from deficiencies through external and internal audits

QUALIFICATIONS_ESSENTIAL

• Bachelor’s degree in Engineering, Computer Science or relevant discipline. With a minimum of 6 years of related experience. 
• Related Quality or Governance Certification is a plus.

QUALIFICATIONS_DESIRABLE

• Some knowledge of Governance of (Security or IT) frameworks and international best practices (i.e. CoBiT, ITIL). 
• Quality or Process Management Certifications is highly recommended. 
• Lean Six Sigma knowledge is highly recommended. 
• Project Management Professional Certificate is highly recommended.

EXPERIENCE_ESSENTIAL

• Area of experience): Security or IT Related Quality or Governance. 
• Excellent Computer skills, MS project & MS office 
• Excellent in Arabic & English (Reading, Writing & Oral).

EXPERIENCE_DESIRABLE

• similar operational environment security compliance and GRC program involvement

CERTIFICATIONS_ESSENTIAL

• Certified in Security or IT control practices