associate manager, distributors sales (khobar)

electrical engineer

sales engineer

tech support engineer

advanced cyber sec archengr – icsot Jobs in Al Khobar

advanced cyber sec archengr – icsot

av engineer

cyber security engineer

Virtu Thinko

Advanced Cyber Sec Arch\Engr &ndash; ICS\OTOverviewThis position is responsible for providing onsite and offsite cyber security services associated with industrial Process Control Networks for Company customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper &amp; Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets. Services provided include on-site and offsite consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified. Responsibilities of the PositionAct as primary customer interface to ensure proposed solutions meet their business needs.Maintain technical competency with the Company Process Solutions security and networking product/systems portfolio, while maintaining expert knowledge on specific designatedsecurity/network disciplines.Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support.Respond to customer inquiries, questions, and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner.Maintain knowledge of current industry security standards such as NIST, NCA, IEC-62443, ISO27001, etc.Maintain cyber security certifications.Requires 30&ndash; 65% travelQualifications &amp; Experience:Bachelor&rsquo;s degree in a computer related field such as Computer Science, Computer informationsystems degree with a minimum of 7 years&rsquo; experience in industrial automation network systems.Must have:Networking certs (CCNA).Cyber Security Risk Analysis.5+ years Industrial Networking.Linux/Windows Security Basics.5+ years Leading Security Projects.Strong Virtualization Experience (VCP).5+ years Performing Audits/Assessments.Familiarity with Industrial Site&rsquo;s Safety Requirements.5+ years&rsquo; Experience within Industrial Process Control.Microsoft &ndash; Active Directory, DNS, WSUS, Terminal Server.Experience in LAN/WAN architectures &amp; Purdue ICS model.Process Control System Design/Implementation Knowledge.Experience designing and optimizing complex LAN environments.Global Industrial Cyber Security Professional (GICSP) certification.Cisco Certified Network/Design/Security Professional (at least one).Experience different firewall vendors (Cisco, Juniper, Palo alto, Fortinet).Experience performing cybersecurity/network/system services at customer sites.Experience with anti-virus systems, backup &amp; restore, Network management &amp; Whitelisting.Experience with current industry security standards (NIST, NCA, IEC-62443, ISO27001, etc).Excellent troubleshooting skills to resolve complex network/application/system integration issues.Nice to have:CompTIA Security +.Certified Ethical Hacker (CEH).Splunk Fundamentals &amp; Administration.Microsoft Certified Systems Engineer (MCSE).Experience on SIEM solution such as (Splunk, ArcSight, Tripwire).CISSP Certified Information Systems Security Professional or similar security certification.Competencies:Result orientedConfident &ndash; ability to work with minimal supervisionOpen minded- Integrative thinkerInfluences without authorityEffective communicatorCustomer service orientatedJob Types: Full-time, Contract Contract length: 12 monthsPay: ﷼8,000.00 - ﷼15,000.00 per monthWork Location: In person

Advanced Cyber Sec ArchEngr – ICSOT

Cyber Sec Arch\Engr ll &ndash; ICS\OT Overview This position is responsible for providing onsite and offsite cyber security services associated with industrial Process Control Networks for Company customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper &amp; Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets. Services provided include on-site and offsite consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified. Responsibilities of the Position&bull;Act as primary customer interface to ensure proposed solutions meet their business needs.&bull;Maintain technical competency with the Company Process Solutions security and networking product/systems portfolio, while maintaining expert knowledge on specific designatedsecurity/network disciplines.&bull;Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support.&bull;Respond to customer inquiries, questions, and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner.&bull;Maintain knowledge of current industry security standards such as NIST, NCA, IEC-62443, ISO27001, etc.&bull;Maintain cyber security certifications.&bull;Requires 30&ndash; 65% travelQualifications &amp; Experience:&bull;Bachelor&rsquo;s degree in a computer related field such as Computer Science, Computer informationsystems degree with a minimum of 3 years&rsquo; experience in industrial automation network systems.Must have:&bull;Networking certs (CCNA).&bull;3+ years Industrial Networking.&bull;Linux/Windows Security Basics.&bull;Virtualization Experience (VCP).&bull;Familiarity within Industrial Process Control.&bull;Familiarity with Industrial Site&rsquo;s Safety Requirements.&bull;Microsoft &ndash; Active Directory, DNS, WSUS, Terminal Server.&bull;Familiarity in LAN/WAN architectures &amp; Purdue ICS model.&bull;Process Control System Design/Implementation Knowledge.&bull;Familiarity designing and optimizing complex LAN environments.&bull;Cisco Certified Network/Design/Security Professional (at least one).&bull;Experience with anti-virus systems, backup &amp; restore, Network management &amp; Whitelisting.Nice to have:&bull;CompTIA Security +.&bull;Cyber Security Risk Analysis.&bull;Certified Ethical Hacker (CEH).&bull;Splunk Fundamentals &amp; Administration.&bull;3+ years Performing Audits/Assessments.&bull;Microsoft Certified Systems Engineer (MCSE).&bull;Experience on SIEM solution such as (Splunk, ArcSight, Tripwire).&bull;Global Industrial Cyber Security Professional (GICSP) certification.&bull;Experience different firewall vendors (Cisco, Juniper, Palo alto, Fortinet).&bull;Experience performing cybersecurity/network/system services at customer sites.&bull;CISSP Certified Information Systems Security Professional or similar security certification.&bull;Experience with current industry security standards (NIST, NCA, IEC-62443, ISO27001, etc).&bull;Excellent troubleshooting skills to resolve complex network/application/system integration issues.Competencies:&bull;Result-oriented.&bull;Effective communicator.&bull;Influences without authority.&bull;Customer service oriented.&bull;Open-minded- Integrative thinker.&bull;Confident &ndash; ability to work with minimal supervision.Job Types: Full-time, Contract Contract length: 12 monthsPay: ﷼7,000.00 - ﷼12,000.00 per monthWork Location: In person

Cyber Sec ArchEngr ll – ICSOT

Sr Advanced Cyber Sec Arch\Engr &ndash; ICS\OTOverviewThis position is responsible for providing onsite and offsite cyber security services associated with industrial Process Control Networks for company customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper &amp; Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets. Services provided include on-site and offsite consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified. Responsibilities of the PositionAct as primary customer interface to ensure proposed solutions meet their business needs.Maintain technical competency with the Company Process Solutions security and networking product/systems portfolio, while maintaining expert knowledge on specific designatedsecurity/network disciplines.Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support.Respond to customer inquiries, questions, and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner.Maintain knowledge of current industry security standards such as NIST, NCA, IEC-62443, ISO27001, etc.Maintain cyber security certifications.Requires 30&ndash; 65% travelQualifications &amp; Experience:Bachelor&rsquo;s degree in a computer related field like Computer Science, Computer information systems degree with a minimum of 12 years&rsquo; experience in industrial automation network systems.Must have:Networking certs (CCNA, CCNP).Cyber Security Risk Analysis.10+ years Industrial Networking.Linux/Windows Security Basics.10+ years Leading Security Projects.Strong Virtualization Experience (VCP).10+ years Performing Audits/Assessments.Familiarity with Industrial Site&rsquo;s Safety Requirements.10+ years&rsquo; Experience within Industrial Process Control.Microsoft &ndash; Active Directory, DNS, WSUS, Terminal Server.Experience in LAN/WAN architectures &amp; Purdue ICS model.Process Control System Design/Implementation Knowledge.Experience designing and optimizing complex LAN environments.Experience on SIEM solution such as (Splunk, ArcSight, Tripwire).Global Industrial Cyber Security Professional (GICSP) certification.Cisco Certified Network/Design/Security Professional (at least one).Experience different firewall vendors (Cisco, Juniper, Palo alto, Fortinet).Experience performing cybersecurity/network/system services at customer sites.CISSP Certified Information Systems Security Professional or similar security certification.Experience with anti-virus systems, backup &amp; restore, Network management &amp; Whitelisting.Experience with current industry security standards (NIST, NCA, IEC-62443, ISO27001, etc).Excellent troubleshooting skills to resolve complex network/application/system integration issues.Competencies:Result orientedConfident &ndash; ability to work with minimal supervisionOpen minded- Integrative thinkerInfluences without authorityEffective communicatorCustomer service orientatedJob Types: Full-time, Contract Contract length: 12 monthsPay: ﷼12,000.00 - ﷼25,000.00 per monthWork Location: In person

Sr Advanced Cyber Sec ArchEngr – ICSOT

Stellar Hunters

<div><h4 class="jobSectionHeader">Job Summary</h4>
We are seeking a Cybersecurity Engineer to design, implement, and maintain security controls that protect the company&rsquo;s systems, applications, and data. The successful candidate will work closely with Engineering, IT, Product, and Security teams to secure cloud-native platforms, support secure development practices, detect and respond to threats, and continuously improve the organization&rsquo;s security posture. This role requires practical hands-on technical skills, a collaborative mindset, and the ability to translate security requirements into engineering solutions.<h4 class="jobSectionHeader">
Key Responsibilities</h4><h5 class="jobSectionHeader">
Security Engineering &amp; Controls</h5><ul><li>
Design, deploy, and maintain security controls and tooling across cloud (AWS, Azure, GCP) and on-premise environments, including network security, host hardening, endpoint protection, and application security controls.</li><li>
Implement and manage identity and access management solutions, least-privilege models, and secure authentication/authorization mechanisms.</li><li>
Integrate security into CI/CD pipelines and automate security testing (SAST, DAST, dependency scanning) and infrastructure-as-code (IaC) security checks.</li></ul><h5 class="jobSectionHeader">
Threat Detection &amp; Incident Response</h5><ul><li>
Develop and tune detection rules, alerts, and playbooks for Security Operations using SIEM, EDR, and cloud-native monitoring tools.</li><li>
Participate in incident response activities, perform root cause analysis, and implement remediation and prevention measures.</li><li>
Collaborate with SOC, IT, and engineering teams to ensure timely containment, eradication, and recovery from security incidents.</li></ul><h5 class="jobSectionHeader">
Secure Architecture &amp; Advisory</h5><ul><li>
Advise product and engineering teams on secure design principles, threat modeling, and security requirements for new features and integrations.</li><li>
Review architecture and code for security risks, provide actionable recommendations, and help implement secure design patterns.</li><li>
Participate in design and architecture reviews to ensure security and compliance requirements are addressed early in the development lifecycle.</li></ul><h5 class="jobSectionHeader">
Vulnerability Management &amp; Continuous Improvement</h5><ul><li>
Manage vulnerability scanning, prioritize remediation activities, and coordinate patching and configuration changes with engineering and IT teams.</li><li>
Drive continuous improvement through automation of security controls, monitoring, reporting, and incident lessons learned.</li><li>
Evaluate and recommend security tools and services to strengthen detection, prevention, and response capabilities.</li></ul><h5 class="jobSectionHeader">
Documentation, Training &amp; Collaboration</h5><ul><li>
Develop and maintain security runbooks, architecture diagrams, control documentation, and operational playbooks.</li><li>
Provide security awareness, developer-focused training, and practical guidance to engineering and operations teams.</li><li>
Work cross-functionally to ensure security requirements are integrated into project plans, vendor selections, and deployment workflows.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent practical experience.</li><li>
3+ years of hands-on experience in cybersecurity engineering, cloud security, DevSecOps, or related roles.</li><li>
Practical experience with cloud platforms (AWS, Azure, GCP), containerization (Docker, Kubernetes), and infrastructure-as-code (Terraform, CloudFormation).</li><li>
Strong knowledge of secure software development practices, application security testing (SAST/DAST), and vulnerability management processes.</li><li>
Experience with security tooling such as SIEM, EDR, vulnerability scanners, secrets management, and IAM solutions.</li><li>
Solid scripting or programming skills (e.g., Python, Go, Bash) to automate tasks and integrate security tooling.</li><li>
Excellent written and verbal communication skills with the ability to document technical controls and communicate with technical and non-technical stakeholders.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications</h4><ul><li>
Relevant certifications such as CISSP, OSCP, GCP/AWS/Azure security certifications, or equivalent practical credentials preferred.</li><li>
Experience working in cloud-native, DevSecOps environments and integrating security into CI/CD pipelines.</li><li>
Prior involvement in incident response, threat hunting, or security operations is advantageous.</li><li>
Familiarity with compliance frameworks (SOC 2, ISO 27001, NIST) and experience supporting security controls for audits is a plus.</li></ul><h4 class="jobSectionHeader">
Work Environment &amp; Compensation</h4><ul><li>
Full-time role with a hybrid onsite/remote work model; occasional travel may be required for stakeholder meetings, audit support, or incident response coordination.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, certification support, and career progression within Security and Engineering functions.</li><li>
Inclusive and respectful workplace culture that values diversity, equity, and work-life balance.</li></ul></div>

Cybersecurity Engineer

Schneider Electric

<div>Job Description:

Responsible for the technical execution &amp; delivery of a range of lifecycle OT &amp; IT Cybersecurity solutions and services for our external customers. As the Cybersecurity Lead Engineer, you will be responsible for overseeing the technical execution and delivery of cybersecurity solutions to clients. This includes managing the implementation of these solutions, conducting site visits to maintain the cybersecurity solution, providing cybersecurity training, and consulting on cybersecurity matters as needed. You will also be responsible for ensuring that the necessary cybersecurity infrastructure is in place to support Schneider Electric applications. Additionally, you may be involved in gathering and defining requirements for cybersecurity projects.<div> 
 
 Responsibilities</div> 
<ul><li>
Principal technical consultant with the proficiency to provide strategic and technically complex expertise and know-how to customers to help define their needs in the Cybersecurity domain. Provides supervision and mentoring to other consultants.</li><li>
Leading and managing cybersecurity projects for OT systems and networks, including planning, execution, and delivery.</li><li>
Developing and implementing cybersecurity controls and safeguards to protect OT systems and networks.</li><li>
Assessing and analyzing the cybersecurity posture of OT systems and networks, identifying vulnerabilities and risks, and recommending remediation measures.</li><li>
Conducting security assessments, penetration testing, and vulnerability assessments on OT systems and networks</li><li>
Developing and implementing cybersecurity policies, standards, and guidelines for OT systems and networks.</li><li>
Providing expert guidance and consulting on OT cybersecurity best practices and technologies.</li><li>
Assisting with the design, configuration, and maintenance of cybersecurity controls for OT systems and networks.</li><li>
Collaborating with other teams and departments to ensure the integration of cybersecurity into OT projects and operations.</li><li>
Keeping up to date with the latest OT cybersecurity trends, threats, and best practices.</li><li>
Developing and delivering OT cybersecurity training to Customers and other team members.</li><li>
Responding to cybersecurity incidents and providing guidance on remediation efforts</li><li>
Leading Cybersecurity factory and site Acceptance testing (FAT/SAT)</li><li>
Create and present technical documentation as needed (FDS, DDS, FAT, MOS, etc.)</li></ul>
(External) English Qualifications:
<ul><li>8+ years of experience in OT Industrial Control System which may include one or more of the following technologies: DCS, SCADA, PLCs, HMI, Data Historians including OSI PI, EDNA, Wonderware.</li><li>
An understanding of Cybersecurity Frameworks (e.g., NIST, NCSC, ISO 270001, COBIT) and ICS protocols (e.g., BACnet, Modbus, PROFINET, PROFIBUS)
</li><li>Excellent Consultancy, Communication &amp; Analytical skills
</li><li>Effective stakeholder mgmt., time management and organizational skills.
</li><li>Fluent English (fluency in another language also an advantage)</li><li>
5+ years&rsquo; experience in networks
</li><li>8+ years performing the installation and/or management of network-based firewalls, preferably Cisco, Fortinet, Juniper, or another top-tier product.</li><li>
8+ years performing network troubleshooting using sniffers and
</li><li>8+ years performing the installation and/or management of network-based Intrusion Detection products.</li><li>
8+ years advanced systems administration (Windows Active Directory)</li><li>
8+ years of experience in implementing End-Point security solutions and EDR (Antivirus, Data Leakage Prevention, Host IPS, Whitelisting)</li><li>
8+ years of experience in implementing system backup solutions.</li><li>
8+ years of experience in implementing patch management solutions.</li><li>
5+ years in scripting skills and programming language (python, PowerShell, Bash etc.)</li></ul>
(External) English Company Boiler Plate:<div></div> 
Looking to make an IMPACT with your career?
When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values &ndash; Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork &ndash; starts with us.
IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world.
We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.
Become an IMPACT Maker with Schneider Electric &ndash; apply today!
&euro;36 billion global revenue 
+13% organic growth 
150 000+ employees in 100+ countries 
#1 on the Global 100 World&rsquo;s most sustainable corporations<div></div><div> 
You must submit an online application to be considered for any position with us. This position will be posted until filled.</div><div></div><div> 
Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and &lsquo;inclusion&rsquo; is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do.</div><div> 
</div><div>At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter here 
 
Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.</div></div><div></div>

Cybersecurity Lead Engineer

ABIS

On-siteFull time
 
Dhahran, Eastern Province, Saudi Arabia
 Description
 
We are seeking a highly experienced Cybersecurity Security Operations Center (SOC) Lead to join our team. The SOC Lead will be responsible for leading and managing the day-to-day operations and ensuring the organization's security posture is maintained.
 
Key Responsibilities: 
<ul>
<li>Leading a team of ITHRA SOC analysts and engineers in the detection, investigation, and response to security incidents</li>
<li>Lead and develop a well-trained ITHRA SOC Team with core competencies necessary to detect, investigate, response, manage risk, stay ahead of security threats or position team to effectively mitigate risk</li>
<li>Monitoring, analyzing, and detecting security events and incidents</li>
<li>Analyze and evaluate network, system, and security alerts performing triage to include determining scope, urgency and potential impact, identifying the specific vulnerability</li>
<li>Actively participate in decision making with leadership and seek to understand the broader impact of current decisions</li>
<li>Developing, implementing, and maintaining security policies, procedures, and standards</li>
<li>Overseeing the use of security tools and technologies, including SIEM, IDS/IPS, and firewalls</li>
<li>Collaborating with other teams to develop and implement incident response plans</li>
<li>Communicating with senior management and stakeholders regarding security incidents and remediation efforts</li>
<li>Keeping abreast of new security threats and technologies and incorporating them into the organization's security posture</li>
<li>Establish and maintain training plans and conduct ongoing training of ITHRA SOC staff</li>
<li>Providing guidance and mentorship to the ITHRA SOC team members</li>
</ul>
Requirements
 
<ul>
<li>Bachelor's degree in Computer Science, Cybersecurity or a related field</li>
<li>Certification by one of these organizations (SANS, Offensive Security, eLearn Security)</li>
<li>Minimum of 5 years of experience in the information security field, SOC lead or management role</li>
<li>Well versed with Security operations, Intrusion detection and incident handling</li>
<li>Security monitoring experience with one or more SIEM technologies</li>
<li>Knowledge of current and emerging technologies and processes used within a SOC to improve efficiency and effectiveness.</li>
<li>Strong communication, writing and interpersonal skills. Strong leadership skills with the ability with the ability to prioritize and execute in a methodical and disciplined manner, as well as to set and manage expectations with stakeholders and team members.</li>
<li>Strong understanding of security threats and technologies</li>
<li>Experience with network and host-based security tools</li>
<li>Experience with incident response procedures and regulations</li>
<li>Strong analytical and problem-solving skills</li>
<li>Strong communication and leadership skills</li>
<li>Strong leadership and team management skills</li>
</ul>

Cybersecurity Analyst - SMP Saudi Aramco

<div><h4 class="jobSectionHeader">Job Summary</h4>
We are seeking a Cyber GRC Manager to lead and mature the company&rsquo;s cyber governance, risk, and compliance (GRC) program. The successful candidate will partner with Security, IT, Legal, Risk, and business stakeholders to design, implement, and operate controls, policies, and risk management practices that reduce cyber risk and support business objectives. This role will own compliance initiatives, third-party risk assessments, policy lifecycle management, and metrics to drive continuous improvement across the organization.<h4 class="jobSectionHeader">
Key Responsibilities</h4><h5 class="jobSectionHeader">
GRC Strategy &amp; Program Leadership</h5><ul><li>
Develop and evolve a risk-based cyber GRC strategy that aligns with enterprise risk appetite and business priorities.</li><li>
Lead the GRC program, including governance forums, risk assessment cadence, control frameworks, and remediation tracking.</li><li>
Partner with senior leadership to translate regulatory and business requirements into practical program objectives and roadmaps.</li></ul><h5 class="jobSectionHeader">
Policy, Standards &amp; Control Management</h5><ul><li>
Maintain and enhance information security policies, standards, and procedures; ensure clear ownership and version control across the policy lifecycle.</li><li>
Define and maintain control objectives mapped to frameworks (e.g., NIST CSF, ISO 27001, SOC 2) and ensure consistent implementation across teams.</li><li>
Coordinate control testing, assessments, and remediation activities with internal teams and external assessors.</li></ul><h5 class="jobSectionHeader">
Risk Assessment &amp; Third-Party Risk Management</h5><ul><li>
Conduct enterprise and technology risk assessments; identify, evaluate, and prioritize cyber risks and mitigation plans.</li><li>
Own third-party risk management processes including vendor risk assessments, due diligence, contract security requirements, and ongoing monitoring.</li><li>
Work with procurement and vendor owners to remediate deficiencies and reduce supply chain risk.</li></ul><h5 class="jobSectionHeader">
Compliance &amp; Audit Support</h5><ul><li>
Manage compliance programs and readiness for relevant regulations and standards (e.g., SOC 2, ISO 27001, GDPR, HIPAA where applicable).</li><li>
Act as primary liaison for internal and external audits, prepare evidence and reporting, and coordinate remediation activities.</li><li>
Maintain documentation and continuous evidence of controls to support attestations and regulatory reporting.</li></ul><h5 class="jobSectionHeader">
Metrics, Reporting &amp; Continuous Improvement</h5><ul><li>
Define and report GRC metrics and dashboards (e.g., risk posture, control maturity, remediation timelines, vendor risk status) to leadership and stakeholders.</li><li>
Use data and trend analysis to identify program gaps, recommend improvements, and measure the effectiveness of risk reduction efforts.</li><li>
Develop and maintain GRC playbooks, runbooks, and process documentation to enable repeatable, auditable practices.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, IT, Risk Management, or a related field, or equivalent practical experience.</li><li>
5+ years of hands-on experience in cyber governance, risk, and compliance, information security, or related roles.</li><li>
Practical knowledge of common security frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and experience mapping controls to frameworks.</li><li>
Experience managing third-party/vendor risk assessments, contract security requirements, and remediation workflows.</li><li>
Strong communication and stakeholder management skills with the ability to influence technical and non-technical audiences.</li><li>
Analytical mindset with experience developing risk assessments, metrics, and executive-level reporting.</li><li>
Familiarity with GRC platforms, risk assessment tools, ticketing systems, and common productivity software.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications</h4><ul><li>
Relevant certifications such as CISSP, CISM, CRISC, CISA, or CDPSE preferred.</li><li>
Experience supporting SOC 2, ISO 27001, or other third-party audits and working with external assessors.</li><li>
Background in cloud security, identity and access management, or secure software development lifecycle practices.</li><li>
Experience implementing or operating GRC tooling (e.g., Archer, RiskLens, OneTrust, ServiceNow GRC) is a plus.</li></ul><h4 class="jobSectionHeader">
Work Environment &amp; Compensation</h4><ul><li>
Full-time position with a hybrid onsite/remote model; occasional travel and after-hours engagement may be required to support assessments and incident response activities.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, cross-functional collaboration, and career growth within Security, IT, and Risk functions.</li><li>
Inclusive, respectful culture that values diversity, equity, and work-life balance.</li></ul></div>

Cyber GRC Manager

Explore 93+ Cyber security engineer in Al Khobar this April. Find roles across top companies and apply now to boost your career.