Company: Saudi Aramco
Skills: IT - Analysis & Management
Experience: 7 + Years
Education: Bachelors/3-5 yr Degree
Location: Saudi Arabia


Position Description:
We are seeking a seasoned Information Security Analyst to join the Planning & Performance Management Department (P&PMD) of the Planning, Budgeting & Performance Management Center (PB&PMC).

P&PMD is the custodian of the Company Business Plan, Accountability and Quarterly Business Review exercises.

The Information Security analyst is assigned to activities to manage the implementation of the Saudi Aramco Data Protection program which includes, but is not limited to: managing access to information, conducting risk assessments and identifying risks, assisting in IT audits, responding to information security incidents and overseeing and execute information security controls using automated tools and/or manual procedures.

Minimum Requirements:
As the successful candidate you will hold a Bachelor Degree in Engineering, Business Administration/Commerce, Computer Science, Management Information Systems (MIS), or Physical Sciences.

You will have 7 years of diversified experience in computer systems analysis or/and systems engineering.

You should have working experience in creating dashboards, visual basic coding, websites and SharePoint development as well as building macros for simple to complex functions in excels.

You should be able to communicate effectively in English, both orally and written, and have demonstrated abilities in problem analysis and resolution.

Duties & Responsibilities:
You will be required to perform the following:

Software - Access control and information, data protection, access to profiles, software related updates, risk management, phishing email overview, system access for employees

Hardware - hardware request, liaising with vendors and IT regarding printers and IT assets, IT assets, roles access for employees

Lead efforts of developing and maintaining data protection manual, policies, procedures, and standards based on knowledge of best practices, compliance requirements and continuous improvement.

Ensure that the information protection goals, strategies, standards, procedures and plans that are maintained and are aligned with the corporate information protection control framework.

Communicate with IT Computer Emergency Response Team in case of information security incidents.

Lead risk management activities and coordinate with IT, Industrial Security, Auditing, Law, HR, and corporate business continuity to ensure alignment with corporate risk management program.

Initiate and lead preliminarily internal information security breaches investigations with approval from Corporate Security Services and his organization management.

Report on the overall information protection security posture and strategy and respond to inquiries from management.

Provide technical advice, guidance and assistance to staff.

Lead initiatives to develop and implement internal data protection compliance programs.

Act as the representative and/or assist in any audit or compliance checks related to information security and IT assets.

Implement procedures for tracking and managing information assets and classifying these information assets in compliance corporate policies.

Ensure that effective controls are implemented to eliminate or minimize the impact and probability of the risks associated with information assets.

Ensure that access approval process is developed and access is provided to individuals authorized based on business justification over multiple systems such as SAP, Windows, SharePoint, Active Directory ... etc.

Report and encourage reporting of Information Security Observations, system misuse, or security breach, or other irregularities within his admin area and business line.

Ensure that policies for data backup and retention are complied with to ensure that critical data is available and recoverable.

Coordinate Business Continuity requirements activities with other teams.

Enforce the guidelines for Physical Security to secure information processing/storage sites and information processing/storage hardware from physical and environmental threats.

About Us:
As an integrated, global petroleum enterprise with operations in Saudi Arabia, Europe, the United States and the Far East, Saudi Aramco is one of the cornerstones of the world's energy supply. Saudi Aramco has a proud legacy of accomplishment in the oil and gas industry. In recent years, the Company has been creating downstream joint and equity ventures, both in Saudi Arabia and in China, and is exploring additional opportunities in refining and petrochemicals. Projects such as these, combined with Saudi Aramco's stature - both as a corporation and as a corporate citizen - in the Kingdom and wherever the Company does business, make for a challenging and rewarding work environment for the personnel of the Finance business line.