Qureos Mentor

MBC GROUP

<div>
 
 
 About us
 
 
 
 
 
 
 With three decades of creating iconic brands and producing groundbreaking award-winning content, MBC GROUP is the leading media organization in the MENA region and the number one Arabic media company in the world. MBC GROUP employs 3000+ staff from over 70 nationalities with a global audience of over 150 million viewers. It reaches audiences through multi-platform experiences &ndash; premium broadcasting, digital streaming, gaming, radio, apps, events, and more.
 
 
 
 
 
 We are seeking a dedicated and detail-oriented Security GRC (Governance, Risk, and Compliance) Analyst to join our dynamic team. In this crucial role, you will help establish a new Cyber GRC function, ensuring our organization not only meets regulatory requirements but also effectively manages risks and implements robust governance frameworks. Your deep understanding of risk management, compliance processes, and governance principles will be vital in shaping the future success of our technology services and customer products.
 
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 
 
 
 
 
 Security Risk Management:
 
 
 <ul>
 <li>
 Adhering to regional policy and industry standards facilitate the end-to-end security risk management process, ensuring that risks are proactively identified, assessed, recorded, and mitigated.
 </li>
 <li>
 Maintain a risk register and evaluate security risks based on their potential enterprise-wide &amp; product impact, likelihood, and mitigation strategies.
 </li>
 <li>
 Serve as a trusted security advisor, collaborating with cross-functional teams including IT, Internal Audit, Development/Engineering, and other business operations teams to foster a culture of risk awareness.
 </li>
 <li>
 Ensure that all security risks align with regulatory requirements such as ISO 27001, NIST, GDPR, and other international security frameworks.
 </li>
 <li>
 Provide oversight and work closely with risk owners to manage the development and implementation of treatment plans that address identified risks
 </li>
 </ul>
 
 
 
 
 
 GRC Tool Management:
 
 
 <ul>
 <li>
 Take ownership of, manage, and continuously enhance the GRC platform to deliver structured and scalable GRC reporting.
 </li>
 <li>
 Develop new features with a GRC product mindset, focusing on integrations and custom reporting in the management tool.
 </li>
 <li>
 Capable of planning and prioritizing tasks to develop a timely and coordinated delivery plan for projects.
 </li>
 <li>
 Setup and manage automated workflows that integrate compliance checks on security controls across cloud and on-premise environments
 </li>
 <li>
 Experienced in writing compliance as code with third-party tools
 </li>
 <li>
 Ability to utilize AI services for analyzing, organizing, automating, and managing compliance frameworks and complex regulatory requirements.
 </li>
 </ul>
 
 
 
 
 
 Audit &amp; Compliance Requirements:
 
 
 <ul>
 <li>
 Carry out a continuous assessment to ensure compliance with the necessary certifications and standards for the organization.
 </li>
 <li>
 Collaborate closely with the Cyber teams to ensure compliance with audit requirements and successful delivery for ISO 27001.
 </li>
 <li>
 Assist in addressing internal and external audit findings from reporting through to remediation and closure.
 </li>
 </ul>
 
 
 
 
 
 Governance:
 
 
 <ul>
 <li>
 Assist in documenting, managing and maintaining a central repository of cyber &amp; data policies to guide and inform teams within the organization.
 </li>
 <li>
 Help prepare management meeting reports by tracking updates on risk triage activities, changes to the critical risk register, and general strategies for risk mitigation.
 </li>
 <li>
 Assist in preparing management meeting reports by providing comprehensive tracking and updates on certification compliance milestones.
 </li>
 </ul>
 
 
 
 
 
 Security Team &amp; Data Governance Collaboration:
 
 
 <ul>
 <li>
 Establish a close collaborative working relationship with the Cyber Defense team.
 </li>
 <li>
 Utilize the cyber defense team's technical expertise to reduce risk and enhance compliance with security best practice.
 </li>
 <li>
 Establish a close collaborative working relationship with the Data Governance team.
 </li>
 <li>
 Utilize the Data Governance team's technical expertise to reduce risk and enhance compliance with data regulations.
 </li>
 </ul>
 
 
 
 
 
 
 Technical Expertise
 
 
 
 
 
 
 
 
 Cloud Platforms:
 
 
 <ul>
 <li>
 Experience with AWS, GCP, and Azure, including cloud security, architecture, and management.
 </li>
 </ul>
 
 
 Security Tools:
 
 
 <ul>
 <li>
 Awareness of security tools and technologies such as SIEM (e.g., Splunk, ELK Stack), vulnerability management (e.g., Wiz, Tenable, Rapid7), WAF, DDoS protection (e.g., AWS Shield, Cloudflare), and endpoint security.
 </li>
 </ul>
 
 
 GRC Management:
 
 
 <ul>
 <li>
 Proficient in using centralized GRC management tooling.
 </li>
 </ul>
 
 
 Analytics and Reporting:
 
 
 <ul>
 <li>
 Experience in analyzing technical debt and historical incidents and generating risk insights.
 </li>
 <li>
 Ability to identify system performance patterns using observability tools.
 </li>
 </ul>
 
 
 Compliance and Governance:
 
 
 <ul>
 <li>
 Familiarity with compliance standards and frameworks such as ISO 27001, NIST, GDPR, and CCPA.
 </li>
 </ul>
 
 
 
 
 
 
 Qualifications
 
 
 
 
 
 
 
 
 Education
 
 :
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field.
 </li>
 </ul>
 
 
 Experience
 
 :
 
 <ul>
 <li>
 Minimum of 3 years of experience in GRC, risk management, compliance, or a related role.
 </li>
 <li>
 Experience in the digital entertainment or VOD industry is a plus.
 </li>
 <li>
 Experience with Saudi Government's National Cybersecurity Authority (NCA) is a plus.
 </li>
 </ul>
 
 
 Skills:
 
 
 <ul>
 <li>
 Strong understanding of regulatory requirements and industry standards.
 </li>
 <li>
 Excellent analytical and problem-solving skills.
 </li>
 <li>
 Effective communication and interpersonal skills.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Professional certifications such as CRISC, CISA, or CISSP are a plus.
 </li>
 <li>
 Ability to work in a fast paced, dynamic environment.
 </li>
 </ul>
 
 
 
 
 REF: PL
 
</div>

Cyber GRC Analyst

<div>
 
 
 Responsibilities :
 
 
 
 
 
 <ul>
 <li>
 Develop, advocate and implement sourcing and negotiation strategies for key spend areas to achieve short and long term savings targets.
 </li>
 <li>
 Evaluate submitted quotations on the basis of objective criteria using any agreed weightings and scoring process.
 </li>
 <li>
 Negotiate with suppliers to agree contract terms and relationships that will achieve the interests of the organization.
 </li>
 <li>
 Evaluate the financial, commercial and technical capabilities of potential suppliers.
 </li>
 <li>
 Identify the non-conformance of supplier performance and take necessary steps to rectify the same.
 </li>
 <li>
 Develop, maintain and improve relationships with internal stakeholders to promote effective procurement.
 </li>
 <li>
 Conduct risk analysis on high spend commodities and suppliers; identify the opportunities for mitigation of such risks and carry out necessary steps.
 </li>
 <li>
 Assist or help in co-ordination of all post order activities on need basis until the material received in safe condition at the site and till the supplier gets paid.
 </li>
 <li>
 Ensure compliance with the organization&rsquo;s procedures that cover the Procurement process
 </li>
 <li>
 Support your colleagues in the execution of projects when required.
 </li>
 <li>
 Prepare and submit the various suits of reports to your Line Manager on weekly, monthly and quarterly basis.
 </li>
 </ul>
 
 
 
 
 
 Requirements:
 
 
 
 
 
 <ul>
 <li>
 5+years experience in procurement of technical categories
 </li>
 <li>
 Passionate about delivering results.
 </li>
 <li>
 Analytical and Planning skills.
 </li>
 <li>
 Proactive problem-solving skills.
 </li>
 <li>
 Excellent negotiations skills.
 </li>
 <li>
 Ability to follow directives and procedures, along with ensuring compliance.
 </li>
 <li>
 Proven decision making and problem-solving skills.
 </li>
 <li>
 Written and Verbal communication skills.
 </li>
 <li>
 Relationship management with internal and external stakeholders.
 </li>
 </ul>
</div>

Senior Buyer

Join MBC GROUP and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

MBC GROUP

ABOUT_COMPANY

Cyber GRC Analyst

Senior Buyer