Director of Compliance

Key ResponsibilitiesSupervises the implementation of audit and compliance monitoring operations for cybersecurity-related controls and works to raise awareness of the importance of cybersecurity among all personnel of the organization.Participates in the development and preparation of policies and procedures and provides recommendations in line with the general objectives and leading practices in the field of work.Proposes areas for development and improvement related to operational procedures to enhance the operational efficiency of the department.Manages the department’s annual operating budget, monitors its performance, and submits periodic reports regarding it.Facilitates activities related to monitoring the implementation of controls and recommendations issued by the National Cybersecurity Authority.Manages the tasks of preparing, compiling, and sharing periodic reports with the National Cybersecurity Authority.Plans the mechanism for implementing periodic audit activities for cybersecurity procedures.Supervises activities related to developing a framework for compliance management and managing the policy governing exceptions.Facilitates the development and implementation of the compliance review plan for information security controls and ensures that any identified gaps are addressed.Manages operations to ensure compliance with national and international laws and regulations related to information security.Manages the tasks of conducting and evaluating compromised assessments and simulating disaster response.Supervises and schedules penetration testing activities, such as red team penetration testing and email phishing simulations, in coordination with the relevant Information Technology Department.Supervises activities related to preparing and conducting readiness exercises for cybersecurity incidents (Table Top / Exercise Drill for Cybersecurity Incidents), in coordination with the relevant departments.Manages the mechanism for assessing security awareness among system users.Supervises activities related to developing plans and executive programs to raise security awareness, in coordination with the various relevant organizational units.Provides support for activities related to preparing and delivering information security awareness and educational programs to beneficiaries.Facilitates the implementation of security awareness programs and works to develop them.Plans the tasks of evaluating technology projects to ensure their compliance with published standards.Adheres to the policies, work conduct, and procedures of the organizational unit.Performs any other tasks assigned by direct supervisors.Required ExperienceMinimum of 8 years of experience in a relevant field.EducationBachelor’s degree in Cybersecurity or any related field.