Your space-enabled career begins here

Careem is looking for a Cyber GRC Analyst II. As a member of an agile team, you will be responsible for the design, implementation, enhancement and maintenance of our Cyber Risk and Compliance Programs. In addition to ensuring proper reporting of security controls, you will be expected to collaborate and manage relations with the business teams and external third party stakeholders, propose solutions to reduce cyber risk exposure and drive constant innovation on the ground in a dynamic environment. While working independently, you will also be responsible for identifying gaps and cyber risks and pushing for implementation and wider adoption of these security controls

The individual will work closely with our Infrastructure, IT, Compliance and Legal teams to help build a secure and robust enterprise Risk Management Program. We operate under multiple regions and this brings interesting challenges for you to solve in the Compliance and Regulatory landscape.

Responsibilities

Risk Management:

• Conduct risk assessments to identify potential risk events and assists in the development and implementation of risk management strategies.
• Collect and analyzes data to support risk mitigation efforts.
• Collaborate with colleagues to monitor risks, report status, and develop countermeasures and contingency plans.
• Conduct comprehensive third-party cyber security assessments; evaluate the security posture of third parties to identify vulnerabilities, gaps, and areas of non-compliance; and identify and recommend security controls, best practices, and risk mitigation strategies in alignment with business
  Compliance Management:
• Conduct compliance assessments to identify gaps and ensure adherence to applicable regulations and standards.
• Working knowledge of NIST Cyber Security Framework (CSF), ISO27001 and ISO27005
• Familiarity with Data Privacy Laws, NESA UAE-IA, PCI-DSS, CBUAE-SVF KSA’s SAMA
• Liaise with external auditors and facilitate external audits
  Governance & Reporting:
• Assist in the development and review of policies and procedures related to cybersecurity and risk management.
• Collaborate with stakeholders to ensure policies and procedures align with organizational goals and regulatory requirements.
• Develop dashboards and assist in the preparation of reports and presentations on cybersecurity controls and risk-related matters.
• Hands-on experience of a GRC tool in managing risk and compliance program (preferable)

Qualifications:

• Bachelors in a Computer Science, Information Systems, or a related field
• 4-6 years of total experience in an Information Security role.
• Technical understanding of SIEM, EDRs, Vulnerability Management, DLP solutions, and the Cloud (preferably AWS).
• Effective communication skills.