IS and IT Member Chief Analyst-Saudi Stock Exchange (TADAWUL)

Date Posted: 20/09/2016

IS and IT Member Chief Analyst

Job Description

Job Purpose:
To develop and maintain members minimum requirements framework and to check/validate members compliance to tadawul’s minimum requirements for IS as part of certification process.

Key Accountabilities:

Operations:
•Follow day-to-day operations relating to one’s own job to ensure work continuity.
• Contribute to preparing timely and accurate reports of IT & Security Risk Management Department to meet the Exchange and department requirements, objectives, and standards.
•Ensure the satisfaction of both internal and external customers by addressing their needs in a courteous and timely manner.
Risk Management:
•Align Tadawul’s Information Security (IS)/Information Technology (IT) governance framework with member’s equivalent.
•Liaise consultation with Tadawul regarding member’s Information Security (IS)/Information Technology (IT) risk and compliance strategies and plans.
•Ensure effective implementation of Tadawul specified Information Security (IS)/Information Technology (IT) control requirements throughout member’s organization, related processes and technological facilities.
•Ensure effective and continuous compliance with Tadawul issued polices and standards.
•Drive Information Security (IS)/Information Technology (IT) risk assessment and assurance activities as required by Tadawul (e.g. CSA, third party assessments, audits).
•Co-ordinate IS/technical security incident reporting, updates and review to Tadawul.
•Consolidate Information Security (IS)/Information Technology (IT) risk reports and conduct reporting to Tadawul.
•Ensure continuous optimization of IS/IT risk function according to Tadawul’s updated requirements.
Continuous Improvement:
•Consider and recommend methods to improve risk and control culture and report them to the Board, executive management and related committees.
•Utilize mathematical and statistical knowledge to assist building risk models supporting operational risk management.
Policies, Processes & Procedures:
•Follow all relevant policies, procedures, and processes in order for the work to be carried out in a controlled and consistent manner.
Governance and Resilience:
•Follow all relevant policies and procedures for the work to be carried out in a well-controlled and consistent manner.
•Contribute to the identification of opportunities for continuous improvement of processes in terms of cost effectiveness and productivity enhancement.
• Promote the implementation and adherence of policies and procedures to other employees within the organization.

Experience:
3 to 5 years of relevant experience in IT, IS & Systems Audit, Risk is required.

Skills

A professional qualification in Certified Ethical Hacker, Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) or equivalent is preferred.