operations manager

operations officer

chief security officer - mena Jobs in Saudi Arabia

chief security officer - mena

manager-operations procurement Jobs in Saudi Arabia

manager-operations procurement

operation manager

cyber operations and threat vulnerability manager it ot

ACWA Power

<div>
 
 The Cyber Operations and Threat &amp; Vulnerability Manager (IT &amp; OT) is responsible for overseeing cybersecurity operations, threat detection, vulnerability management, and risk mitigation across both Information Technology (IT) and Operational Technology (OT) environments. This role ensures the organization&rsquo;s IT and OT infrastructures are protected from evolving cyber threats, vulnerabilities, and risks. The manager leads efforts to detect, assess, and remediate security weaknesses while coordinating responses to mitigate potential impacts on both digital and physical systems. This role is critical in ensuring the security posture of the entire organization, encompassing both traditional IT systems and specialized OT environments such as Industrial Control Systems (ICS) and SCADA.
 
 
 
 
 
 
 KEY ACCOUNTABILITIES:
 
 
 
 
 
 
 
 Cyber Operations Oversight (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Manage and oversee daily cyber operations across both IT and OT environments, ensuring consistent security monitoring, incident response, and threat detection.
 </li>
 <li>
 Lead the Security Operations Center (SOC) to monitor and respond to cyber threats in real-time, ensuring a unified approach for both IT and OT infrastructures.
 </li>
 <li>
 Implement and enforce security policies, procedures, and controls tailored to the specific needs of both IT and OT systems, ensuring alignment with industry best practices and regulatory requirements.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Response (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Oversee threat detection and response efforts across the organization using SIEM, XDR, and other specialized security tools for both IT and OT environments.
 </li>
 <li>
 Develop and implement incident response playbooks, ensuring they address potential threats to both IT systems (e.g., networks, servers, endpoints) and OT systems (e.g., SCADA, ICS, PLCs).
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats, vulnerabilities, and attack vectors targeting both IT and OT infrastructures.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Response (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Oversee threat detection and response efforts across the organization using SIEM, XDR, and other specialized security tools for both IT and OT environments.
 </li>
 <li>
 Develop and implement incident response playbooks, ensuring they address potential threats to both IT systems (e.g., networks, servers, endpoints) and OT systems (e.g., SCADA, ICS, PLCs).
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats, vulnerabilities, and attack vectors targeting both IT and OT infrastructures.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Response (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Oversee threat detection and response efforts across the organization using SIEM, XDR, and other specialized security tools for both IT and OT environments.
 </li>
 <li>
 Develop and implement incident response playbooks, ensuring they address potential threats to both IT systems (e.g., networks, servers, endpoints) and OT systems (e.g., SCADA, ICS, PLCs).
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats, vulnerabilities, and attack vectors targeting both IT and OT infrastructures.
 </li>
 </ul>
 
 
 
 
 
 Security Engineering &amp; Hardening (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Work with IT and OT engineering teams to implement security best practices during the design, development, and deployment of new systems.
 </li>
 <li>
 Ensure that all IT and OT systems are hardened against known vulnerabilities and emerging attack vectors by applying patches, configurations, and security controls
 </li>
 </ul>
 
 
 
 
 
 Incident Response &amp; Coordination (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead the organization&rsquo;s incident response efforts across IT and OT systems, ensuring rapid identification, containment, and remediation of security incidents.
 </li>
 <li>
 Coordinate cross-functional teams, including IT, OT, forensics, and legal, to ensure a cohesive response to major incidents affecting both environments.
 </li>
 <li>
 Perform post-incident analysis and root cause investigations to identify gaps in security controls and improve future incident response capabilities.
 </li>
 </ul>
 
 
 
 
 
 Security Monitoring &amp; Optimization (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Continuously monitor the effectiveness of security tools and processes across IT and OT environments, ensuring timely detection and response to potential threats.
 </li>
 <li>
 Work with the threat detection and threat hunting teams to optimize security monitoring tools and improve alert accuracy for both IT and OT systems.
 </li>
 <li>
 Leverage insights from threat intelligence and threat hunting activities to enhance proactive threat detection and response capabilities.
 </li>
 </ul>
 
 
 
 
 
 Collaboration with Cross-Functional Teams:
 
 
 
 
 
 <ul>
 <li>
 Collaborate with IT, OT, and business stakeholders to ensure security operations align with organizational goals and risk management strategies.
 </li>
 <li>
 Work closely with compliance teams to ensure that both IT and OT environments meet regulatory requirements such as NCA, NIST, ISO 27001, NERC-CIP, and ISA/IEC 62443.
 </li>
 </ul>
 
 
 
 
 
 Collaboration with Cross-Functional Teams:
 
 
 
 
 
 <ul>
 <li>
 Collaborate with IT, OT, and business stakeholders to ensure security operations align with organizational goals and risk management strategies.
 </li>
 <li>
 Work closely with compliance teams to ensure that both IT and OT environments meet regulatory requirements such as NIST, ISO 27001, NERC-CIP, and ISA/IEC 62443.
 </li>
 </ul>
 
 
 
 
 
 Security Awareness &amp; Training (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Develop and implement security awareness programs tailored to both IT and OT personnel, ensuring employees understand potential threats and the importance of following security policies.
 </li>
 <li>
 Conduct training sessions for IT and OT teams on incident response, vulnerability management, and secure system configurations
 </li>
 </ul>
 
 
 
 
 
 QUALIFICATIONS :
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (master&rsquo;s degree preferred).
 </li>
 <li>
 6+ years of experience in cybersecurity operations, incident response, or vulnerability management, with experience in OT environments such as ICS/SCADA.
 </li>
 <li>
 Experience managing cybersecurity programs that span both IT and OT environments.
 </li>
 <li>
 Proficiency in SIEM platforms, XDR, and other monitoring tools for both IT and OT infrastructures.
 </li>
 <li>
 Strong hands-on experience with vulnerability management tools (e.g., Tenable, Qualys, Nessus, OT-specific platforms).
 </li>
 <li>
 Deep understanding of IT security controls as well as OT-specific controls for ICS, SCADA, and PLC systems.
 </li>
 <li>
 Knowledge of threat intelligence, incident response, and forensics in both IT and OT environments.
 </li>
 </ul>
 
 
</div>

Cyber Operations and Threat & Vulnerability Manager (IT & OT)

<div>
 
 The Incident Response &amp; Forensics Manager (IT &amp; OT) is responsible for managing and leading the organization's incident response and forensic investigation efforts across both Information Technology (IT) and Operational Technology (OT) environments. This role ensures that security incidents are promptly detected, contained, investigated, and remediated, while also overseeing the collection and analysis of forensic evidence. The manager coordinates across multiple teams to enhance the organization&rsquo;s ability to respond to cyber incidents, minimize damage, and prevent future security breaches within both IT and OT domains.
 
 
 
 
 
 
 KEY ACCOUNTABILITIES:
 
 
 
 
 
 
 
 Incident Response Management (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead and manage the organization's incident response efforts across both IT and OT systems, ensuring rapid detection, containment, and resolution of security incidents.
 </li>
 <li>
 Develop and maintain incident response playbooks, ensuring that they address specific threats to both IT and OT environments.
 </li>
 <li>
 Coordinate with internal teams and external stakeholders to ensure effective communication and collaboration during incident response efforts.
 </li>
 <li>
 Oversee the triage, prioritization, and escalation of security incidents, ensuring that critical threats are addressed in a timely manner.
 </li>
 <li>
 Provide incident response support to both IT and OT infrastructure teams, advising on containment actions and recovery steps.
 </li>
 <li>
 Offer remediation guidance including configuration changes and preventive measures to minimize future threats in both IT and OT systems.
 </li>
 <li>
 Triage alerts from detection platforms, identifying and removing false positives across IT and OT environments.
 </li>
 <li>
 Escalate genuine threats and security incidents to the appropriate teams for further investigation and remediation, ensuring timely and accurate response to both IT-based and OT-based threats.
 </li>
 </ul>
 
 
 
 
 
 Forensic Investigation (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead digital forensic investigations within both IT and OT systems to determine the root cause of security incidents, ensuring the proper collection, preservation, and analysis of digital evidence.
 </li>
 <li>
 Utilize forensic tools and techniques to investigate compromised systems, networks, and devices across IT and OT infrastructures.
 </li>
 <li>
 Ensure that forensic processes adhere to legal and regulatory requirements, and that evidence is documented in a formal and defensible manner for potential legal proceedings.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Analysis (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct continuous monitoring of security events across both IT and OT environments using SIEM, XDR, and other Threat Detection, Investigation, and Response (TDIR) platforms.
 </li>
 <li>
 Analyze telemetry from multiple sources (network traffic, endpoints, OT systems, etc.) to detect and investigate potential cyber threats, ensuring comprehensive coverage across both digital and physical systems.
 </li>
 <li>
 Monitor and analyze security events from various sources&mdash;including SIEM, intrusion detection/prevention systems (IDS/IPS), firewalls, endpoint detection systems, and OT-specific monitoring tools&mdash;to identify potential threats and vulnerabilities.
 </li>
 <li>
 Lead efforts to correlate security information from both IT and OT environments to identify patterns of anomalous behavior and mitigate potential threats.
 </li>
 </ul>
 
 
 
 
 
 Incident Reporting &amp; Documentation:
 
 
 
 
 
 <ul>
 <li>
 Document formal technical incident reports for consumption by IT and OT infrastructure teams and senior leadership, providing detailed information on root causes, affected systems, and next steps.
 </li>
 <li>
 Ensure clear and concise communication of incident details to both IT and OT stakeholders, enabling effective decision-making during and after incidents.
 </li>
 <li>
 Ensure accurate and detailed documentation of all security incidents, including timelines, actions taken, and outcomes, for post-incident reviews and compliance reporting.
 </li>
 <li>
 Prepare formal incident reports and technical summaries for senior management, internal stakeholders, and regulatory authorities as required.
 </li>
 <li>
 Conduct post-incident reviews and lessons learned sessions to identify opportunities for improvement in incident response procedures for both IT and OT environments.
 </li>
 </ul>
 
 
 
 
 
 Collaboration &amp; Coordination:
 
 
 
 
 
 <ul>
 <li>
 Work closely with threat hunting teams to optimize TDIR capabilities by incorporating findings from threat hunting activities in both IT and OT environments.
 </li>
 <li>
 Continuously improve detection and response strategies based on real-world threat activity affecting both IT networks and OT systems.
 </li>
 <li>
 Collaborate with IT engineering, OT operations, cybersecurity teams, and third-party vendors to coordinate response efforts and ensure that both IT and OT systems are fully protected during and after an incident.
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats to both IT and OT systems and ensure that the organization&rsquo;s incident response strategy remains current and effective.
 </li>
 <li>
 Provide incident response support to both IT and OT infrastructure teams, advising on containment actions and recovery steps.
 </li>
 <li>
 Offer remediation guidance including configuration changes and preventive measures to minimize future threats in both IT and OT systems.
 </li>
 </ul>
 
 
 
 
 
 Incident Response Training &amp; Drills:
 
 
 
 
 
 <ul>
 <li>
 Develop and conduct regular incident response simulations and training exercises across both IT and OT teams to ensure readiness for real-world cyber incidents.
 </li>
 <li>
 Ensure that all relevant personnel are trained in their roles during an incident and are familiar with the incident response plan for both IT and OT systems.
 </li>
 </ul>
 
 
 
 
 
 Detection Platform Enhancement (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Work with threat detection content development teams to fine-tune detection platforms and create new detection rules tailored to the unique needs of both IT and OT environments.
 </li>
 <li>
 Continuously enhance detection capabilities to improve alert accuracy and reduce false positives in both IT systems (e.g., endpoints, networks) and OT systems (e.g., SCADA, ICS).
 </li>
 </ul>
 
 
 
 
 
 Root Cause Analysis &amp; Prevention (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct in-depth root cause analysis of security incidents across IT and OT systems, identifying vulnerabilities, misconfigurations, or other weaknesses.
 </li>
 <li>
 Provide recommendations for mitigating future risks, including configuration changes and security controls for both IT infrastructure and OT control systems.
 </li>
 </ul>
 
 
 
 
 
 Policy Development &amp; Incident Response Governance
 
 :
 
 
 
 
 <ul>
 <li>
 Assist in the development and refinement of incident response policies, forensic procedures, and security standards for both IT and OT environments.
 </li>
 <li>
 Ensure that incident response efforts comply with relevant regulatory requirements and industry best practices for both IT and OT sectors.
 </li>
 </ul>
 
 
 
 
 
 compliance &amp; Performance Reporting (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Support the development and execution of compliance reporting for both IT and OT teams, ensuring that security incidents and responses are documented in line with organizational and regulatory requirements.
 </li>
 <li>
 Provide SOC performance reporting to ensure key metrics and Service Level Agreements (SLAs) are met for both IT and OT operations.
 </li>
 </ul>
 
 
 
 
 
 Vulnerability &amp; Exposure Analysis (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct analysis and testing to identify vulnerabilities, misconfigurations, and other exposures across both IT and OT environments.
 </li>
 <li>
 Validate user policies, configurations, and access controls to ensure they align with the security posture of both IT and OT systems, maintaining a holistic security approach.
 </li>
 <li>
 Efficiency &amp; SLA Adherence (IT &amp; OT):
 </li>
 <li>
 Work efficiently to meet SOC metrics and SLAs, ensuring timely and effective response to incidents affecting both IT infrastructure and OT control systems.
 </li>
 </ul>
 
 
 
 
 
 QUALIFICATIONS:
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field (Master's preferred).
 </li>
 <li>
 5+ years of experience in incident response, digital forensics, or cybersecurity operations, with at least 2 years focusing on OT environments.
 </li>
 <li>
 Proficiency in incident response tools, forensic tools, and SIEM platforms (e.g., Splunk, ELK, QRadar).
 </li>
 <li>
 Experience with both IT and OT-specific security platforms (e.g., SCADA, ICS, PLC systems).
 </li>
 <li>
 Knowledge of forensic analysis techniques across networks, endpoints, and OT systems.
 </li>
 <li>
 Familiarity with threat intelligence, malware analysis, and vulnerability management for both IT and OT infrastructures.
 </li>
 </ul>
 
 
</div>

Incident Response & Forensics Manager (IT & OT)

Accenture

<div><div><h1 class="jobSectionHeader">The Work</h1>
Join us in shaping the future of security solutions! As a CTI Specialist, you will play a critical role in strengthening our cybersecurity posture by providing actionable threat intelligence. You will collaborate with cross-functional teams, contribute to key decisions, and deliver innovative solutions to emerging challenges. Your expertise in Cyber Threat Intelligence will help us proactively identify, assess, and mitigate threats in a rapidly evolving digital landscape.<h1 class="jobSectionHeader">
Key Responsibilities:</h1><ul><li>
Design and implement security solutions that enhance organizational security posture.</li><li>
Govern the use of enterprise security tools and architecture frameworks to ensure compliance.</li><li>
Build and maintain digital identity and platform security measures.</li><li>
Develop strategies for data protection and cloud security solutions.</li><li>
Support Security Operations Center (SOC) activities by providing threat intelligence to detect and respond to cyber threats effectively.</li></ul></div></div>
 
<div><h1 class="jobSectionHeader">Here&rsquo;s What You&rsquo;ll Need</h1><ul><li>
Advanced proficiency in Cyber Threat Intelligence.</li><li>
Minimum of 2 years of experience in relevant cybersecurity roles.</li><li>
Bachelor&rsquo;s Degree in Information Security, Computer Science, or a related field.</li></ul><h1 class="jobSectionHeader">
Bonus Points If You Have</h1><ul><li>
Intermediate proficiency in Risk Assessment.</li><li>
Advanced proficiency in Incident Response.</li><li>
Expert proficiency in Security Architecture.</li><li>
Intermediate proficiency in Vulnerability Management.</li><li>
Master proficiency in Security Compliance Frameworks.</li></ul></div>

Cyber Threat Intelligence (CTI) Specialist

COGNNA

<div>As a Senior Threat Detection Engineer at COGNNA, you&rsquo;ll design high-impact detection strategies, build powerful automation, and elevate SOC operations to a world-class standard. You&rsquo;ll also mentor rising cyber talent and collaborate with teams across threat intel, incident response, and platform engineering. 
 
 Advanced Threat Detection Engineering<ul>
<li>
Build high-fidelity correlation rules and behavioral detections within the COGNNA security platforms.</li>
<li>Translate adversary TTPs (MITRE ATT&amp;CK), threat intel, and vulnerability data into actionable logic.</li>
<li>Identify detection gaps and introduce new data sources to cover evolving threat landscapes.</li>
<li>Automate detection testing and maintain detection quality over time.</li>
</ul><ul><li>️ Platform Engineering &amp; Optimization</li></ul><ul>
<li>
Lead architecture and optimization of XDR, SIEM, and SOC tech stacks for scale and resilience.</li>
<li>Streamline log ingestion pipelines &mdash; from parsing to normalization and enrichment.</li>
<li>Build scripts and automations (Python, PowerShell) to enhance SOC efficiency.</li>
Integrate tools across the SOC stack to enable seamless workflows and response. 
<li>
</li></ul>️&zwj; ️ Threat Hunting &amp; Incident Response<ul>
<li>
Collaborate with intel and IR teams to enrich detection use cases and support threat hunts.</li>
<li>Provide Tier-3+ support for incident investigations and post-mortem analysis.</li>
</ul>
 Mentorship &amp; SOC Maturity<ul>
<li>
Mentor junior engineers, review detection logic, and provide hands-on training.</li>
<li>Improve SOC playbooks, SOPs, and detection engineering workflows.</li>
<li>Stay updated on global and regional threats &mdash; and evolve detection accordingly.</li>
<li>Ensure compliance alignment (e.g., NCA ECC, SAMA CSF).</li>
</ul>
Requirements<h3 class="jobSectionHeader">
 Education</h3><ul><li>
Bachelor&rsquo;s in Computer Science, Cybersecurity, or related field. 
 </li></ul><h3 class="jobSectionHeader">Experience</h3><ul>
<li>4+ years in Threat Detection, SOC Engineering, or Advanced SecOps.</li>
<li>Hands-on expertise in developing and maintaining complex detection use cases.</li>
<li>Strong understanding of attacker behavior, IR fundamentals, and digital forensics. 
 </li></ul><h3 class="jobSectionHeader">Technical Skills (You&rsquo;re a Power User!)</h3><ul>
<li>SIEM: Expert in SIEM queries (SPL, KQL, Lucene), rule tuning, UEBA, and scaling.</li>
<li>EDR: Deep knowledge of EDR tools and endpoint detection tactics.</li>
<li>Network Security: Pro at packet analysis (Wireshark), IDS/IPS, and NetFlow.</li>
<li>Scripting: Advanced skills in Python and/or PowerShell for automation and integration.</li>
<li>OS Internals: Mastery of Windows/Linux/macOS logging, artifacts, and forensic value.</li>
<li>Threat Intelligence: Skilled in turning threat intel into real-time detection logic.</li>
<li>Cloud Security: Strong command of monitoring IaaS/PaaS/SaaS environments.</li>
</ul><h3 class="jobSectionHeader">
 Certifications (Highly Preferred)</h3>
<ul><li> SANS GIAC (GDAT, GMON, GCIA, GCTI, GCIH)</li>
<li> Offsec (OSDA)</li>
<li> INE (eCTHP, eCIR)</li>
<li> (ISC)&sup2; CISSP, CSSLP 
 </li></ul><h3 class="jobSectionHeader">Soft Skills</h3><ul>
<li>Exceptional analytical thinking and creative problem-solving.</li>
<li>Excellent communication (English &amp; Arabic), including technical reporting.</li>
<li>Strong mentorship abilities and a collaborative spirit.</li>
<li>Self-motivated, focused, and passionate about cyber defense.</li>
Capable of juggling priorities under high-pressure situations. 
<li>
</li></ul>Benefits
 Impact that Matters &ndash; Build products that shape the future of cybersecurity and protect organizations globally.
 On-Site Collaboration &ndash; Be at the heart of innovation in our Riyadh office, working side by side with passionate experts.
 Continuous Growth &ndash; Access to certifications, trainings, and opportunities to sharpen your expertise.
 Ownership Mindset &ndash; Benefit from our ESOP program and grow with COGNNA&rsquo;s success.
 Culture of Trust &ndash; We empower talent, encourage ownership, and celebrate real outcomes.</div>

Senior Threat Detection Engineer - Cybersecurity

<div><h1 class="jobSectionHeader">Job Description:</h1> 
Transform your passion for security into impactful solutions! As a Security Delivery Lead, you will serve as a subject matter expert, collaborating with cross-functional teams to make critical decisions and manage the delivery of security governance. This role offers an exciting opportunity to shape security strategies, implement innovative solutions, and ensure alignment with enterprise policies. Join us in safeguarding our organization and driving security excellence!<h1 class="jobSectionHeader">
Key Responsibilities:</h1><ul><li>
Design and implement security solutions to enhance the organization's overall security posture.</li><li>
Govern the use of enterprise security tools and architecture frameworks.</li><li>
Build and maintain robust digital identity and platform security measures.</li><li>
Develop and execute data and AI protection strategies to safeguard sensitive information.</li><li>
Establish and operate a Security Operations Center (SOC) to detect and respond to cyber threats effectively.</li></ul></div>
 
<div><h1 class="jobSectionHeader">Required Qualifications:</h1><ul><li>
Expert proficiency in Security Delivery Governance.</li><li>
Advanced proficiency in Computer Security Incident Response.</li><li>
A minimum of 5 years of experience in relevant security-related roles.</li><li>
Bachelor's Degree in a relevant field of study.</li></ul>
Preferred Qualifications (Bonus Points):<ul><li>
Intermediate proficiency in Risk Management.</li><li>
Advanced proficiency in Threat Intelligence.</li><li>
Expert proficiency in Incident Management.</li><li>
Intermediate proficiency in Compliance Frameworks.</li><li>
Advanced proficiency in Vulnerability Assessment.</li></ul></div>

Security Delivery Lead

Stitch

Job Title: Cyber Security Officer &ndash; Compliance, Risk &amp; CryptographyLocation: United Arab EmiratesExperience Level: 8+ yearsDepartment: Information Security / Risk &amp; ComplianceReports To: Chief Information Security Officer (CISO) / Head of Security GovernancePosition OverviewWe are seeking a seasoned Cyber Security Officer to lead and maintain our organization&rsquo;s information security, compliance, and cryptographic infrastructure. The ideal candidate will bring deep expertise in PCI DSS, ISO 27001, SOC 1 &amp; 2, and privacy-related standards, combined with a strong understanding of SAMA Cyber Security Framework (CSF), NCA ECC and CCC, and Sarie security controls.This role will drive cybersecurity strategy, governance, and architecture, ensuring the organization&rsquo;s systems, data, and payment infrastructure remain secure, compliant, and resilient to emerging threats.Key ResponsibilitiesInformation Security Governance &amp; Strategy<ul><li>Develop and maintain the organization&rsquo;s cybersecurity strategy, roadmap, and governance framework.</li><li>Define, implement, and maintain security policies, standards, and procedures in alignment with international best practices (ISO, PCI, NIST).</li><li>Lead risk assessments, gap analyses, and develop mitigation strategies across business units.</li><li>Oversee internal and external cybersecurity audits and coordinate responses and remediation.</li><li>Report key risk and compliance metrics to executive management and regulatory stakeholders.</li></ul>Compliance &amp; Certifications<ul><li>Maintain and ensure ongoing compliance with:</li><li>PCI DSS (including PCI PIN and P2PE)</li><li>ISO 27001, SOC 1 &amp; SOC 2, ISO 27701 (Privacy Information Management)</li><li>SAMA Cyber Security Framework (CSF) and NCA ECC/CCC</li><li>Sarie and UAE Central Bank regulatory requirements</li><li>Oversee audit readiness, manage evidence collection, and coordinate with QSA and internal audit teams.</li><li>Drive continuous improvement in security maturity and compliance posture.</li></ul>Cryptography &amp; Key Management<ul><li>Manage HSM operations, cryptographic key generation, rotation, and destruction procedures in compliance with PCI PIN and PCI DSS.</li><li>Maintain Key Management Systems (KMS) and enforce strict segregation of duties and dual control mechanisms.</li><li>Develop and review Key Management Policies (KMP) and ensure secure storage, handling, and lifecycle documentation.</li><li>Support encryption architecture, ensuring data confidentiality and integrity across systems and payment channels.</li></ul>Cybersecurity Architecture &amp; Operations<ul><li>Define and maintain cybersecurity architecture and ensure integration of secure design principles across IT and fintech platforms.</li><li>Collaborate with infrastructure, DevOps, and product teams to embed security by design in new systems and applications.</li><li>Evaluate and implement security tools such as SIEM, DLP, IAM, EDR, and vulnerability management solutions.</li><li>Lead incident response and root cause analysis (RCA) for major security events and ensure lessons learned are institutionalized.</li></ul>Internal Audit &amp; Risk Management<ul><li>Conduct periodic internal audits of critical systems, data flows, and control environments.</li><li>Identify control gaps and lead remediation plans in coordination with technology and compliance teams.</li><li>Support third-party risk assessments, ensuring vendors adhere to corporate and regulatory security standards.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in information security, Computer Science, or related field</li><li>8+ years of experience in cybersecurity, compliance, and information security governance, preferably in fintech, banking, or payment processing.</li><li>Proven expertise in maintaining compliance with PCI DSS, PCI PIN, ISO 27001, SOC 1 &amp; 2, ISO 27701, and related privacy standards.</li><li>Strong working knowledge of SAMA CSF, NCA ECC/CCC, and Sarie frameworks in the GCC context.</li><li>Hands-on experience with HSMs (Thales, Utimaco, SafeNet, etc.), cryptographic key management, and secure key ceremonies.</li><li>Familiarity with cybersecurity architecture, risk management, and threat mitigation frameworks (NIST CSF, CIS, ISO 27005).</li><li>Strong understanding of network security, encryption standards, incident response, and vulnerability management.</li><li>Excellent communication, leadership, and stakeholder management skills.</li></ul>Preferred Qualifications<ul><li>Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer / Auditor, PCI ISA / QSA.</li><li>Experience working with financial regulators in the GCC and managing multi-audit environments.</li><li>Exposure to Cloud Security (ISO 27017/27018, CSA CCM) and privacy regulations (GDPR, DIFC, ADGM DP Law).</li><li>Strong presentation and executive reporting capabilities.</li></ul>Key Performance Indicators (KPIs)<ul><li>Audit and certification renewal success rate (PCI DSS, ISO, SOC, etc.)</li><li>Security incident rate reduction and MTTR (Mean Time to Resolve)</li><li>Compliance gap closure and risk mitigation timelines</li><li>Security architecture and roadmap maturity level improvements</li><li>Stakeholder satisfaction and regulatory compliance audit outcomes</li></ul>Job Type: Full-time

cyber security officer

<div><div><h1 class="jobSectionHeader">The Work</h1>
Join us in creating a safer digital environment! As a Security Analyst, you will play a key role in monitoring, analyzing, and improving our security posture. You will work independently, contribute to critical discussions, and deliver innovative solutions to complex challenges. Your expertise in security monitoring will help us detect and respond to threats effectively, ensuring the protection of sensitive information and systems.<h1 class="jobSectionHeader">
Key Responsibilities:</h1><ul><li>
Design and implement innovative security solutions to enhance organizational security posture.</li><li>
Govern the use of enterprise security tools and frameworks to ensure compliance and effectiveness.</li><li>
Build and maintain digital identity and platform security measures to protect sensitive information.</li><li>
Develop and implement strategies for data protection and cloud security.</li><li>
Support Security Operations Center (SOC) activities to effectively detect and respond to cyber threats.</li></ul></div></div>
 
<div><h1 class="jobSectionHeader">Here&rsquo;s What You&rsquo;ll Need</h1><ul><li>
Expert proficiency in Security Monitoring.</li><li>
Advanced proficiency in Splunk Security Information and Event Management (SIEM).</li><li>
Minimum of 1 year of experience in relevant security operations roles.</li><li>
Bachelor&rsquo;s Degree in Information Security, Computer Science, or a related field.</li></ul><h1 class="jobSectionHeader">
Bonus Points If You Have</h1><ul><li>
Advanced knowledge of incident response procedures.</li><li>
Intermediate understanding of threat intelligence analysis.</li><li>
Expertise in vulnerability assessment and management.</li><li>
Master proficiency in risk assessment methodologies.</li><li>
Intermediate skills in security compliance frameworks.</li></ul><h1 class="jobSectionHeader">
Why Join Us?</h1>
You will be part of a dynamic team committed to innovation and excellence in cybersecurity. Your contributions will directly impact our ability to protect critical assets, anticipate emerging threats, and maintain trust in a rapidly evolving digital environment.</div>

Security Analyst

Explore 3863+ Cyber operations and threat vulnerability manager it ot in Saudi Arabia this January. Find roles across top companies and apply now to boost your career.