Cyber security Analyst I

1. Monitor and advice on information security issues to ensure the internal Cybersecurity controls for the YASREF is adequately maintained and operating as intended.

2. Participate and publish Cybersecurity policies, procedures, standards and guidelines based on knowledge of best practices and compliance requirements.

3. Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.

4. Coordinate and execute Cybersecurity projects for the YASREF.

5. Alert top management and Information Technology department to response to Cybersecurity incidents.

6. Participate in risk assessment process for new projects as well as major changes to existing Infrastructure/Applications.

7. Participate in conducting organization wide data classification assessment and security audits.

8. Participate in creating cryptographic protocols to encrypt emails, files, and other critical data.

9. Participate and create incident response plans, annual IT risk assessments and associated risk mitigation and avoidance functions.

10.Document Cybersecurity incidents and emergency measures taken, procedures and tests conducted.

11. Collaborate with government IT department, legal department to report and comply with safety and security regulations.

12. Create, manage and maintain user security awareness among all computer users.

13. Participate in YASREF's efforts to comply with ISO 27001 Information security management certification standards.

14. Perform other job-related duties as assigned by the direct Supervisor.