Security Compliance Officer

Responsibilities

• Compliance Program Management: Maintain security policies aligned with SOC 2, ISO 27001, UAE NESA, and UAE banking license requirements, ensuring regulatory adherence and continuous improvement.

• License and Certification Management: Oversee audits, evidence collection, and recertification processes for SOC 2, ISO 27001, and NESA, ensuring timely submission of regulatory filings for the UAE banking license.

• Risk Management and Incident Response: Identify security risks, manage mitigation plans, and ensure timely reporting and resolution of security incidents as per regulatory guidelines.

• Internal and External Audits: Coordinate internal readiness reviews and external audits, ensuring audit findings are addressed with corrective action plans.

• Third-Party and Vendor Management: Perform security assessments of vendors and third-party providers, ensuring their compliance with security standards and contractual obligations.

• Employee Training and Awareness: Implement security awareness programs and ensure employees understand compliance roles and responsibilities.

• Governance and Reporting: Provide regular compliance status updates and key performance metrics to senior management and regulatory bodies.

• KSA-Specific Security Frameworks and Certifications: Provide support for security certifications, audits, and frameworks specific to the Kingdom of Saudi Arabia, including SAMA Cybersecurity Framework (CSF), Personal Data Protection Law (PDPL), CRFR and MVC

Soft Skill

• Collaboration and Teamwork: Ability to work effectively across departments to align compliance initiatives with business goals.

• Effective Communication: Strong ability to convey complex compliance requirements and audit findings to technical and non-technical stakeholders.

• Accountability and Ownership: Takes responsibility for tasks and projects, ensuring timely delivery and transparency in actions.

• Attention to Detail: Maintains precision in documentation, evidence collection, and policy updates to ensure full compliance.

• Critical Thinking and Problem-Solving: Capable of identifying compliance gaps and implementing practical solutions under tight deadlines.