Cybersecurity Risk Management

Key Responsibilities• Strategy Development: Develop and update comprehensive cybersecurity risk management strategies and policies aligned with the organization’s objectives, best practices, and regulatory standards.• Risk Assessment: Conduct thorough cybersecurity risk assessments to identify potential threats and classify them based on likelihood and impact.• Mitigation Planning: Develop and implement plans to address vulnerabilities and security gaps, including corrective actions and risk-mitigation measures.• Incident Response: Prepare incident response plans, manage the handling of security attacks, and document incidents and investigation results.• Compliance & Audit: Ensure organizational compliance with cybersecurity standards and frameworks such as NIST and ISO 27001, and conduct periodic compliance reviews.• Monitoring & Analysis: Monitor security performance, analyze security alerts, perform threat hunting, and provide actionable recommendations.• Awareness & Training: Enhance employee security awareness through workshops and training programs to improve understanding of security responsibilities.• Future Planning: Oversee continuous vulnerability assessments and update prevention and mitigation plans to effectively address emerging threats.• Vendor Management: Assess external vendors’ adherence to cybersecurity standards and manage any potential risks associated with them.Skills & Competencies• Strong understanding of risk assessment, risk analysis, and risk management concepts.• Knowledge of international and local cybersecurity frameworks and standards.• Ability to develop security policies and procedures.• Strong analytical and problem-solving skills.• Understanding of various cyberattacks such as intrusions and malware.• Ability to work with cybersecurity tools and Security Operations Centers (SOC).• Excellent communication skills to collaborate with various departments and senior management.