Cybersecurity GRC Specialist

Job Purpose

The job holder is responsible for developing of cybersecurity GRC activities by developing cybersecurity strategy and requirements, implementing cybersecurity risk & compliance mgmt., raising awareness on cyber threats, and providing cybersecurity training.

Key Roles and Responsibilities

• Identify opportunities for continuous improvement, practices, cost ‎optimization, and productivity & efficiency improvement.
• Ensures compliance with all applicable laws, rules, regulations, and standards within WTCO and related functions such as but not limited to (HC, HSSE, Risk, Cybersecurity, etc..).
• Escalate problems to ensure case/issue is closed efficiently and in a timely manner.
• Ensure applying cybersecurity strategy to safeguard and protect all IT operations and assets to ensure the reliability and integrity of data.
• Ensure gathering information related to leading practices to support in the development of cybersecurity governance framework in line with relevant regulations and legislation.
• Develop cybersecurity policies and procedures, and governance framework in line with the relevant regulations and legislation.
• Develop the periodical review on cybersecurity strategy, policies, and related documents to maintain compliance with applicable legislation and regulation.
• Develop cybersecurity requirements are implemented, and that relevant regulations and legislation are adhered to.

Key Roles and Responsibilities 2

• Ensure developing cybersecurity vendor assessment is implemented across WTCO and projects.
• Ensure that cybersecurity risks are managed in a systematic manner aimed at protecting the information and technical assets of WTCO.
• Ensure implementing cybersecurity risk management process on an ongoing basis to mitigate risks and propose enhancements.
• Develop WTCO's cybersecurity compliance requirements, policies and systems, and ensure internal compliance across WTCO's functions.
• Raise employee’s awareness on cyber threats and ensure that they are aware of their cybersecurity responsibilities.
• Provide the employees with the required training in the field of cybersecurity to protect the information and technology assets of WTTCO and to fulfill their responsibilities towards cybersecurity.
• Ensure meeting the requirements of cybersecurity resilience in WTCO's business resilience management.
• Ensure the implementation of third-party and cloud computing cybersecurity requirements in accordance with WTCO's policies & procedures, and the relevant regulations and legislation.

Key Roles and Responsibilities 3

Education Requirements

Key Communications

Internal Stakeholders

• All Departments

External Stakeholders

• Consultants/Contractors
• Vendors/Suppliers/Service providers
• Government authorities and entities

Disclaimer

The above job description is meant to describe the general nature and level of work being performed; it is not intended to be constructed as an exhaustive list of all responsibilities, duties, and skills required for the position. Accordingly, there is no way this Job Description states or implies that these are the only duties to be performed by the employee in this position. Employees will be required to follow any other job-related instructions and to perform other job-related duties.