Goal

Ensure the successful functioning of AOC's enterprise information networks and technology in order to facilitate the highest level of reliabili ty, performance, and interchangeof dat a and software assuring to meet customers' needs

General Profile

About the Role

Join our dynamic Information Technology team in The Hague! We’re looking for a passionate IT GRC Cybersecurity Analyst to play a key role in supporting our international workforce. This is a fixed term, rolling direct contract with Aramco Europe, offering not only a collaborative environment but also exclusive benefits designed to reward your expertise. If you thrive in a global setting and want to make an impact, we’d love to hear from you!

Functional Specific Requirements

Responsibilities

Governance:

• Develop and implement internal IT policies, standards and procedures in alignment with IT governance frameworks.
• Ensure alignment of IT strategies with business objectives.
• Monitor compliance with internal policies and external regulations.

Cybersecurity Key Performance Indicators (KPI)

• Monitor and update key cybersecurity metrics (e.g., patch compliance, vulnerability aging, incident response times) to ensure accurate, timely reporting.
• Track KPI performance against targets, identify deviations or emerging risks, and escalate issues to the management.
• Coordinate with IT and security teams to collect data, validate accuracy, and maintain dashboards or scorecards for continuous KPI visibility.

Risk Management:

• Identify, assess, and mitigate IT cybersecurity risks.
• Perform regular cybersecurity risk assessments.
• Develop and maintain risk management strategies and plans.

Compliance:

• Ensure compliance with internal policies, standard and industry standards (e.g., ISO 27001, GDPR, NIST).
• Conduct compliance assessments and prepare reports.

Security Awareness:

• Develop cybersecurity training and awareness program.
• Track and report on the effectiveness of security awareness programs.
• Design and execute simulation campaigns (example: phishing, whaling).
• Analyze results and provide feedback to improve awareness.

Third Party Management:

• Review the security posture of third-parties that handle company critical data or have access to company systems.
• Monitor ongoing third‑party risks through periodic reviews, performance assessments, or updated security documentation.

Qualifications

• Bachelor degree or equivalent in Technology, Computer Science or related fields.
• Must be able to communicate and comprehend accurately, clearly and concisely in English at a level required to perform the key responsibilities as outlined.
• Minimum of 5 years work experience in IT GRC, IT Risk Assessment, IT Security or comparable field, preferably in a multinational environment.
• Preferably with relevant certifications such as CISA, CISSP, CRISC, or CISM.

Required Skills

• Strong analytical, communication, and project management skills.

Preferred Skills

• Experience in a multinational environment.

General Requirements:

• Bachelor degree or equivalent in Technology, Computer Science or related fields
• Must be able to communicate and comprehend accurately, clearly and concisely in English at a level required to perform the key responsibilities as outlined.
• Minimum of 5 years work experience in IT GRC, IT Risk Assessment, IT Security or comparable field, preferably in a multinational environment.
• Preferably with relevant certifications such as CISA, CISSP, CRISC, or CISM.
• Strong analytical, communication, and project management skills.

Required Competency Levels (cont)