ISMS Risk Assessor
احفظ هذه الوظيفة وحافظ على تنظيم بحثك
قم بإنشاء حساب مجاني لحفظ الوظائف وإنشاء التنبيهات والعودة إلى هذه القائمة من لوحة التحكم الخاصة بك.
بالمتابعة، فإنك توافق على الشروط & سياسة الخصوصية.
· Develop, review, update/improve and maintain the Cybersecurity Risk Management and related governance and compliance documents.
· Plan assessments by confirming scope, context, stakeholders, assets/services, information classification, dependencies, assumptions and required evidence.
· Facilitate risk assessment workshops with business/system/process/service/application/risk owners and technical support team.
· Develop precise cause-event-impact risk statements and identify credible threat scenarios, vulnerabilities, existing controls and control gaps.
· Assess inherent and residual risk using PDO-approved likelihood, impact and risk acceptance criteria; calibrate scoring and document rationale.
· Evaluate control design and implementation through interviews, document review, observation and sampling, while preserving an evidence trail.
· Develop proportionate risk treatment options and assist risk owners to define actions, action parties, target dates and measurable completion evidence.
· Prepare risk assessment reports, risk-register entries from various sources (such as Annual Assessments, Projects, Internal/External Audits, etc.), executive summaries, dashboards and escalation inputs suitable for governance decisions.
· Perform periodic and change-triggered reassessments; update risk status and validate treatment evidence and residual risk.
· Support risk acceptance, exception and escalation workflows without replacing the accountability of the designated risk owner.
· Identify systemic or recurring themes and recommend practical improvements to methodology, controls, templates and reporting.
· Support ISMS internal audit, certification, management review and continual improvement activities when assigned.
· Maintain complete working papers, version control, confidentiality and traceability for every assessment.
|
Category |
Mandatory requirement |
|
Education |
Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering or a closely related discipline. A postgraduate qualification is advantageous. |
|
ISO competency |
Valid ISO/IEC 27001 Lead Auditor or Lead Implementer certification from a recognized personnel certification/training body. |
|
Risk / security credential |
At least two valid professional certifications: CRISC, CISSP, CISM or CISA. |
|
Verification |
Service provider must provide certificate numbers or verifiable evidence before interview. Course attendance certificates alone do not satisfy a professional certification requirement. |
-
Third-Party Risk Assessor
منذ 4 أيام
Muscat, عُمان Bahwan CyberTek دوام كامل· Develop, review, update/improve and maintain the Vendor Security/Third-Party Risk Management and related governance and compliance documents (including vendor tiering, checklists, assessment toolkits, etc.). · Triage and classify third parties/vendors/suppliers/service-providers using service criticality, data access, connectivity, hosting model,...
-
HSE Officer
منذ يوم
muscat, muscat governorate, عُمان Oman Investment Authority دوام كاملOman Investment Authority seeks an HSSE-focused professional to conduct safety inspections across sites and shipyards, identify non-compliance, and assist in risk assessment and incident investigations. You will document findings, issue permits, support training, and maintain records to uphold safety standards. The role requires 3–5 years of relevant...
-
muscat, muscat governorate, عُمان Oman Investment Authority دوام كاملOman Investment Authority seeks a Manager Cyber & Information Security Operations to lead cyber defense, incident response, and forensics, ensuring regulatory and internal security framework compliance. This role coordinates with MSSPs and vendors to optimize detection, response workflows and risk management across platforms. The candidate will drive...
-
Manager – Cyber
منذ يوم
muscat, muscat governorate, عُمان Oman Housing Bank | بنك الإسكان العُماني دوام كاملJob Purpose: The Manager – Cyber & Information Security (InfoSec) Operations supervises the bank’s cyber defense operations, ensuring timely detection, response, and resolution of security incidents. He/ She operates incident handling, digital forensics, and third-party cybersecurity coordination while maintaining compliance with regulatory and internal...
-
Manager Cyber
منذ يوم
muscat, muscat governorate, عُمان Tawteen دوام كامل1. Job Details: Position Title: Manager Cyber & Information Security (InfoSec) Operations - Reports to: Head Cyber & Information Security Group: Risk Management Department / Function: Cyber & Information Security 2. Job Purpose: The Manager Cyber & Information Security (InfoSec) Operations supervises the bank s cyber defense operations, ensuring timely...
-
Quality Assurance Manager
منذ 16 ساعات
Muscat, Muscat Governorate, عُمان Pentascribe دوام كامل ٢٦٬٠٠٠ ر.ع. - ٥٢٬٠٠٠ ر.ع. عقدCompany Al Ghalbi International - OMAN Job Location Coastal Project Maintenance and Integrity contract - North OMAN Experience - Shall have minimum of 15 years of relevant experience in onshore oil and gas facility projects including live installations Out of 15 years of experience 5 years of experience should have gained preferably in the Middle East Shall...
-
muscat, muscat governorate, عُمان Oman Investment Authority دوام كاملJob Purpose The Manager Cyber & Information Security (InfoSec) Operations supervises the bank's cyber defense operations ensuring timely detection, response and resolution of security incidents. He / She operates incident handling, digital forensics and third-party cybersecurity coordination while maintaining compliance with regulatory and internal security...
-
Field Assessment Lead – Oman
منذ أسبوع
Muscat, MA, عُمان Tadafur Consulting and Training LLC دوام كاملFor an upcoming 12-month financial-sector regulatory digital maturity assessment project in Oman (subject to contract award). Requirements: - Minimum 7 years in IT audit, technology risk, regulatory inspection or control assurance. - Proven experience conducting on-site assessments in regulated financial institutions. - Ability to review policies, IT...
-
Senior Procurement Specialist
منذ 2 أسابيع
Muscat, Muscat Governorate, عُمان Worley دوام كاملAbout Us Worley is a global company of energy, chemicals and resources experts headquartered in Australia. We partner with our customers to deliver projects and create value across the life of their assets. We specialize in consulting, engineering, procurement and construction across the project lifecycle, with services extending through to operations and...
-
Senior Buyer
منذ 2 أسابيع
Muscat, Muscat Governorate, عُمان Worley دوام كاملAbout us Worley is a global company of energy, chemicals and resources experts headquartered in Australia. We partner with our customers to deliver projects and create value across the life of their assets. We specialize in consulting, engineering, procurement and construction across the project lifecycle, with services extending through to operations and...
