Security Risk Expert

About the role

The organization is seeking a Security Risk Expert to lead risk assessment activities across IT, DevOps, and telecom projects. The role ensures that security considerations are embedded from design through launch and that existing systems remain protected against evolving threats.

Key responsibilities

• Conduct comprehensive risk assessments for new and existing IT/DevOps/telecom projects, covering design, implementation, and operational phases.
• Develop and maintain a centralized risk register, providing senior leadership with up‑to‑date visibility of risk exposure.
• Translate identified risks into actionable mitigation plans with clear owners and timelines.
• Collaborate with stakeholders to embed risk controls into workflows and monitor compliance with internal policies and Jordanian regulatory standards.
• Report risk status, trends, and emerging threats to senior management to support proactive governance.

Required profile

• Bachelor’s degree in IT, Computer Science, or Cybersecurity; a master’s degree in Cybersecurity, Risk Management, or Information Security is a plus.
• 5‑7 years of experience in IT/cybersecurity risk management, information security, or IT audit, preferably in the telecom or technology sector.
• Proven track record of conducting risk assessments across project lifecycles and maintaining risk registers.
• Familiarity with Jordanian regulatory frameworks such as the National Cybersecurity Framework and the Jordan Data Protection Law.

Required skills

• Knowledge of international cybersecurity frameworks: ISO/IEC 27001, NIST Cybersecurity Framework.
• Understanding of telecom‑specific security standards: GSMA guidelines, ITU‑T recommendations, TM Forum frameworks.
• Experience with risk assessment methodologies (qualitative and quantitative), threat modeling, and vulnerability management.
• Awareness of data‑privacy principles (GDPR concepts and JDPL) and business continuity, disaster recovery, and incident response practices.