Senior Cybersecurity Analyst - GRC

Role Summary

The Senior Cybersecurity Analyst at Johns Hopkins Aramco Healthcare (JHAH) is tasked with the deployment and upkeep of the organization's cybersecurity framework. Leveraging extensive expertise across multiple relevant technologies and methodologies, this role safeguards sensitive organizational data and prevents any malicious activities threatening business continuity.

Education and Experience

Candidates must hold a Bachelor's Degree in Information Technology or a closely related discipline, coupled with a minimum of five years of meaningful experience in cybersecurity or a correlated field.

Certifications

Preferred professional certifications include, but are not limited to:

• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+
• Certified Information Security Manager (CISM)
• GIAC Security Essentials Certification (GSEC)
• Project Management Professional (PMP)
• IT Infrastructure Library (ITIL)

Core Duties and Responsibilities

• Deploy, configure, maintain, support, and continuously monitor the enterprise IT cybersecurity infrastructure covering firewalls, antivirus tools, encryption protocols, intrusion detection systems, access management, network monitoring, Security Operations Center (SOC) platforms, and other protective assets to guarantee reliability, stability, scalability, security, and peak performance.
• Oversee cybersecurity governance, risk management, and compliance programs by enforcing alignment with policies, standards, regulations, frameworks, and incident reaction plans, supported by routine evaluations, drills, and user education campaigns.
• Identify and take action on cybersecurity events including breaches, intrusions, threats, and system vulnerabilities in strict adherence to relevant organizational policies and procedures.
• Ensure all cybersecurity infrastructures conform to best practices, regulatory guidance, enterprise architecture norms, governance initiatives, and internal policies.
• Administer engagements with external cybersecurity vendors for support, managed, or professional services, ensuring these meet expected scope, timing, budget, and quality metrics.
• Handle cybersecurity-related service requests according to company policies and procedures.
• Assess cybersecurity elements within IT demand requests and assist in fulfilling approved projects compliant with policies and following the organization's IT project management methodologies.

Language Requirements

Proficiency in English is mandatory; Arabic language skills are not required.