cybersecurity engineer

application engineer

application engineer ii - protection Jobs in Al Khobar

application engineer ii - protection

chief process engineer

cyber grc manager

cybersecurity lead engineer

Schneider Electric

<div>Job Description:
<p>
Responsible for the technical execution &amp; delivery of a range of lifecycle OT &amp; IT Cybersecurity solutions and services for our external customers. As the Cybersecurity Lead Engineer, you will be responsible for overseeing the technical execution and delivery of cybersecurity solutions to clients. This includes managing the implementation of these solutions, conducting site visits to maintain the cybersecurity solution, providing cybersecurity training, and consulting on cybersecurity matters as needed. You will also be responsible for ensuring that the necessary cybersecurity infrastructure is in place to support Schneider Electric applications. Additionally, you may be involved in gathering and defining requirements for cybersecurity projects.</p><div><b><br>
</b><br>
<b> Responsibilities</b></div><br>
<ul><li>
Principal technical consultant with the proficiency to provide strategic and technically complex expertise and know-how to customers to help define their needs in the Cybersecurity domain. Provides supervision and mentoring to other consultants.</li><li>
Leading and managing cybersecurity projects for OT systems and networks, including planning, execution, and delivery.</li><li>
Developing and implementing cybersecurity controls and safeguards to protect OT systems and networks.</li><li>
Assessing and analyzing the cybersecurity posture of OT systems and networks, identifying vulnerabilities and risks, and recommending remediation measures.</li><li>
Conducting security assessments, penetration testing, and vulnerability assessments on OT systems and networks</li><li>
Developing and implementing cybersecurity policies, standards, and guidelines for OT systems and networks.</li><li>
Providing expert guidance and consulting on OT cybersecurity best practices and technologies.</li><li>
Assisting with the design, configuration, and maintenance of cybersecurity controls for OT systems and networks.</li><li>
Collaborating with other teams and departments to ensure the integration of cybersecurity into OT projects and operations.</li><li>
Keeping up to date with the latest OT cybersecurity trends, threats, and best practices.</li><li>
Developing and delivering OT cybersecurity training to Customers and other team members.</li><li>
Responding to cybersecurity incidents and providing guidance on remediation efforts</li><li>
Leading Cybersecurity factory and site Acceptance testing (FAT/SAT)</li><li>
Create and present technical documentation as needed (FDS, DDS, FAT, MOS, etc.)</li></ul>
(External) English Qualifications:
<ul><li>8+ years of experience in OT Industrial Control System which may include one or more of the following technologies: DCS, SCADA, PLCs, HMI, Data Historians including OSI PI, EDNA, Wonderware.</li><li>
An understanding of Cybersecurity Frameworks (e.g., NIST, NCSC, ISO 270001, COBIT) and ICS protocols (e.g., BACnet, Modbus, PROFINET, PROFIBUS)
</li><li>Excellent Consultancy, Communication &amp; Analytical skills
</li><li>Effective stakeholder mgmt., time management and organizational skills.
</li><li>Fluent English (fluency in another language also an advantage)</li><li>
5+ years&rsquo; experience in networks
</li><li>8+ years performing the installation and/or management of network-based firewalls, preferably Cisco, Fortinet, Juniper, or another top-tier product.</li><li>
8+ years performing network troubleshooting using sniffers and
</li><li>8+ years performing the installation and/or management of network-based Intrusion Detection products.</li><li>
8+ years advanced systems administration (Windows Active Directory)</li><li>
8+ years of experience in implementing End-Point security solutions and EDR (Antivirus, Data Leakage Prevention, Host IPS, Whitelisting)</li><li>
8+ years of experience in implementing system backup solutions.</li><li>
8+ years of experience in implementing patch management solutions.</li><li>
5+ years in scripting skills and programming language (python, PowerShell, Bash etc.)</li></ul>
(External) English Company Boiler Plate:<p></p><p><b><br>
Looking to make an IMPACT with your career?</b></p><p>
When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values &ndash; Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork &ndash; starts with us.</p><p>
IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world.</p><p>
We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.</p><p>
Become an IMPACT Maker with Schneider Electric &ndash; apply today!</p><p>
&euro;40 billion global revenue<br>
+9% organic growth<br>
150 000+ employees in 100+ countries</p><p></p><div><br>
You must submit an online application to be considered for any position with us. This position will be posted until filled.</div><div></div><div><i><br>
Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and &lsquo;inclusion&rsquo; is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do.</i></div><div><br>
</div><div><i>At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter </i><i>here</i><br>
<br>
<i>Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.</i></div></div>

Cybersecurity Lead Engineer

Virtu Thinko

<p><b>OT Cybersecurity Architect / Engineer II (ICS/OT) | Saudi Arabia</b></p><p>We are seeking an experienced <b>OT Cybersecurity Architect/Engineer</b> to deliver cybersecurity solutions across industrial control systems (ICS) and process control networks within the oil &amp; gas and critical infrastructure sectors.</p><p><b>Role Overview:</b><br/>Provide onsite and remote cybersecurity services including consulting, network design, implementation, troubleshooting, and risk assessments for OT environments.</p><p><b>Key Responsibilities:</b></p><ul><li>Design and secure ICS/OT environments (SCADA, DCS, Process Control Networks)</li><li>Act as primary interface with clients to deliver tailored security solutions</li><li>Perform risk assessments, audits, and incident response support</li><li>Ensure compliance with standards (NIST, IEC 62443, ISO 27001, NCA)</li><li>Support integration between IT &amp; OT environments</li></ul><p><b>Requirements:</b></p><ul><li>Bachelor&rsquo;s in <b>Computer Science, Instrumentation, or related field</b></li><li>3+ years in <b>industrial networking / OT cybersecurity</b></li><li>Strong knowledge of <b>ICS, Purdue Model, LAN/WAN architectures</b></li><li>Experience with <b>Active Directory, virtualization, Linux/Windows security</b></li><li>Networking certifications (CCNA or equivalent)</li></ul><p><b>Nice to Have:</b></p><ul><li>Certifications: <b>CISSP, GICSP, CEH, Security+</b></li><li>Experience with <b>SIEM tools (Splunk, ArcSight)</b> and firewalls (Cisco, Palo Alto, Fortinet)</li><li>Background in oil &amp; gas or similar industries</li></ul><p><b>Additional:</b></p><ul><li>Strong troubleshooting and communication skills</li><li>Willingness to travel (30&ndash;65%)</li><li><b>Location: Saudi Arabia</b></li><li><b>Preference will be given to Saudi and Bahraini nationals</b></li></ul><p>Job Types: Full-time, Contract<br/>Contract length: 12 months</p><p>Pay: ﷼10,000.00 - ﷼18,000.00 per month</p><p>Work Location: In person</p>

OT Cybersecurity Architect

<div>Job Description:
<p>
Responsible for the technical execution &amp; delivery of a range of lifecycle OT &amp; IT Cybersecurity solutions and services for our external customers.</p><p><br>
</p><div><b>Job Responsibilities:</b></div><p>
As a Cybersecurity Engineer, you will be responsible for assisting in the technical execution and delivery of cybersecurity solutions to clients. This includes managing the implementation of these solutions, conducting site visits to maintain the cybersecurity solution, providing cybersecurity trainings, and consulting on cybersecurity matters as needed. You will also be responsible for ensuring that the necessary cybersecurity infrastructure is in place to support Schneider Electric applications. Additionally, you may be involved in gathering and defining requirements for cybersecurity projects.</p><br>
<div></div><ul><li>
Assisting in cybersecurity projects for OT systems and networks, including planning, execution, and delivery.</li><li>
Assisting in implementing cybersecurity controls and safeguards to protect OT systems and networks</li><li>
Assessing in analyzing the cybersecurity posture of OT systems and networks, identifying vulnerabilities and risks, and recommending remediation measures.</li><li>
Participate in risk assessments and vulnerability assessments on the OT systems of our clients</li><li>
Providing expert guidance and consulting on OT cybersecurity best practices and technologies.</li><li>
Assisting with the design, configuration, and maintenance of cybersecurity controls for OT systems and networks.</li><li>
Collaborating with other teams and departments to ensure the integration of cybersecurity into OT projects and operations.</li><li>
Keeping up to date with the latest OT cybersecurity trends, threats, and best practices.</li><li>
Participate in Cybersecurity factory and site Acceptance testing (FAT/SAT)</li><li>
Create and present technical documentation as needed (FDS, DDS, FAT, MOS, etc.)</li></ul><br>
<div></div>
(External) English Qualifications:
<ul><li>2+ years of experience in OT Industrial Control System</li><li>
2+ years performing the installation and/or management of network-based firewalls, preferably Cisco, Fortinet, Juniper, or another top-tier product.</li><li>
2+ years performing L2/L3 network implementation and configuration including STP, RING, VRRP, OSPF, ISIS, RIP, etc.</li><li>
2+ years performing network troubleshooting using sniffers and other tools/technique.</li><li>
2+ years performing the installation and/or management of network-based Intrusion Detection products.</li><li>
2+ years of experience in implementing End-Point security solutions (Antivirus, Data Leakage Prevention, Host IPS, Allow-listing).</li><li>
2+ years of experience in implementing system backup solutions.</li><li>
2+ years of experience in patch management solutions</li><li>
2+ years in scripting skills and programming language (python, PowerShell, Bash etc..).</li><li>
2+ years of experience using discovery, vulnerability scanning, and penetration testing tools (Nessus, Qualys, ZAP Proxy, Burp Suite, Metasploit, etc&hellip;).</li></ul>
(External) English Company Boiler Plate:<p></p><p><b><br>
Looking to make an IMPACT with your career?</b></p><p>
When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values &ndash; Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork &ndash; starts with us.</p><p>
IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world.</p><p>
We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.</p><p>
Become an IMPACT Maker with Schneider Electric &ndash; apply today!</p><p>
&euro;40 billion global revenue<br>
+9% organic growth<br>
150 000+ employees in 100+ countries</p><p></p><div><br>
You must submit an online application to be considered for any position with us. This position will be posted until filled.</div><div></div><div><i><br>
Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and &lsquo;inclusion&rsquo; is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do.</i></div><div><br>
</div><div><i>At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter </i><i>here</i><br>
<br>
<i>Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.</i></div></div>

Cybersecurity Engineer

Stellar Hunters

<div><h4 class="jobSectionHeader"><b>Job Summary</b></h4><p>
We are seeking a <b>Cybersecurity Engineer</b> to design, implement, and maintain security controls that protect the company&rsquo;s systems, applications, and data. The successful candidate will work closely with Engineering, IT, Product, and Security teams to secure cloud-native platforms, support secure development practices, detect and respond to threats, and continuously improve the organization&rsquo;s security posture. This role requires practical hands-on technical skills, a collaborative mindset, and the ability to translate security requirements into engineering solutions.</p><h4 class="jobSectionHeader"><b>
Key Responsibilities</b></h4><h5 class="jobSectionHeader"><b>
Security Engineering &amp; Controls</b></h5><ul><li><p>
Design, deploy, and maintain security controls and tooling across cloud (AWS, Azure, GCP) and on-premise environments, including network security, host hardening, endpoint protection, and application security controls.</p></li><li><p>
Implement and manage identity and access management solutions, least-privilege models, and secure authentication/authorization mechanisms.</p></li><li><p>
Integrate security into CI/CD pipelines and automate security testing (SAST, DAST, dependency scanning) and infrastructure-as-code (IaC) security checks.</p></li></ul><h5 class="jobSectionHeader"><b>
Threat Detection &amp; Incident Response</b></h5><ul><li><p>
Develop and tune detection rules, alerts, and playbooks for Security Operations using SIEM, EDR, and cloud-native monitoring tools.</p></li><li><p>
Participate in incident response activities, perform root cause analysis, and implement remediation and prevention measures.</p></li><li><p>
Collaborate with SOC, IT, and engineering teams to ensure timely containment, eradication, and recovery from security incidents.</p></li></ul><h5 class="jobSectionHeader"><b>
Secure Architecture &amp; Advisory</b></h5><ul><li><p>
Advise product and engineering teams on secure design principles, threat modeling, and security requirements for new features and integrations.</p></li><li><p>
Review architecture and code for security risks, provide actionable recommendations, and help implement secure design patterns.</p></li><li><p>
Participate in design and architecture reviews to ensure security and compliance requirements are addressed early in the development lifecycle.</p></li></ul><h5 class="jobSectionHeader"><b>
Vulnerability Management &amp; Continuous Improvement</b></h5><ul><li><p>
Manage vulnerability scanning, prioritize remediation activities, and coordinate patching and configuration changes with engineering and IT teams.</p></li><li><p>
Drive continuous improvement through automation of security controls, monitoring, reporting, and incident lessons learned.</p></li><li><p>
Evaluate and recommend security tools and services to strengthen detection, prevention, and response capabilities.</p></li></ul><h5 class="jobSectionHeader"><b>
Documentation, Training &amp; Collaboration</b></h5><ul><li><p>
Develop and maintain security runbooks, architecture diagrams, control documentation, and operational playbooks.</p></li><li><p>
Provide security awareness, developer-focused training, and practical guidance to engineering and operations teams.</p></li><li><p>
Work cross-functionally to ensure security requirements are integrated into project plans, vendor selections, and deployment workflows.</p></li></ul><h4 class="jobSectionHeader"><b>
Required Qualifications - Skills &amp; Experience</b></h4><ul><li><p>
Bachelor&rsquo;s degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent practical experience.</p></li><li><p>
3+ years of hands-on experience in cybersecurity engineering, cloud security, DevSecOps, or related roles.</p></li><li><p>
Practical experience with cloud platforms (AWS, Azure, GCP), containerization (Docker, Kubernetes), and infrastructure-as-code (Terraform, CloudFormation).</p></li><li><p>
Strong knowledge of secure software development practices, application security testing (SAST/DAST), and vulnerability management processes.</p></li><li><p>
Experience with security tooling such as SIEM, EDR, vulnerability scanners, secrets management, and IAM solutions.</p></li><li><p>
Solid scripting or programming skills (e.g., Python, Go, Bash) to automate tasks and integrate security tooling.</p></li><li><p>
Excellent written and verbal communication skills with the ability to document technical controls and communicate with technical and non-technical stakeholders.</p></li></ul><h4 class="jobSectionHeader"><b>
Preferred Qualifications</b></h4><ul><li><p>
Relevant certifications such as CISSP, OSCP, GCP/AWS/Azure security certifications, or equivalent practical credentials preferred.</p></li><li><p>
Experience working in cloud-native, DevSecOps environments and integrating security into CI/CD pipelines.</p></li><li><p>
Prior involvement in incident response, threat hunting, or security operations is advantageous.</p></li><li><p>
Familiarity with compliance frameworks (SOC 2, ISO 27001, NIST) and experience supporting security controls for audits is a plus.</p></li></ul><h4 class="jobSectionHeader"><b>
Work Environment &amp; Compensation</b></h4><ul><li><p>
Full-time role with a hybrid onsite/remote work model; occasional travel may be required for stakeholder meetings, audit support, or incident response coordination.</p></li><li><p>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</p></li><li><p>
Opportunities for professional development, certification support, and career progression within Security and Engineering functions.</p></li><li><p>
Inclusive and respectful workplace culture that values diversity, equity, and work-life balance.</p></li></ul></div>

ABIS

<div><p>We are seeking a highly experienced Cybersecurity Security Operations Center (SOC) Lead to join our team. The SOC Lead will be responsible for leading and managing the day-to-day operations and ensuring the organization's security posture is maintained.</p><p><b>
Key Responsibilities:</b></p><ul><li>Leading a team of ITHRA SOC analysts and engineers in the detection, investigation, and response to security incidents</li><li>Lead and develop a well-trained ITHRA SOC Team with core competencies necessary to detect, investigate, response, manage risk, stay ahead of security threats or position team to effectively mitigate risk</li><li>Monitoring, analyzing, and detecting security events and incidents</li><li>Analyze and evaluate network, system, and security alerts performing triage to include determining scope, urgency and potential impact, identifying the specific vulnerability</li><li>Actively participate in decision making with leadership and seek to understand the broader impact of current decisions</li><li>Developing, implementing, and maintaining security policies, procedures, and standards</li><li>Overseeing the use of security tools and technologies, including SIEM, IDS/IPS, and firewalls</li><li>Collaborating with other teams to develop and implement incident response plans</li><li>Communicating with senior management and stakeholders regarding security incidents and remediation efforts</li><li>Keeping abreast of new security threats and technologies and incorporating them into the organization's security posture</li><li>Establish and maintain training plans and conduct ongoing training of ITHRA SOC staff</li><li>Providing guidance and mentorship to the ITHRA SOC team members</li></ul><b><br>
Requirements</b><ul><li><br>
Bachelor's degree in Computer Science, Cybersecurity or a related field</li><li>Certification by one of these organizations (SANS, Offensive Security, eLearn Security)</li><li>Minimum of 5 years of experience in the information security field, SOC lead or management role</li><li>Well versed with Security operations, Intrusion detection and incident handling</li><li>Security monitoring experience with one or more SIEM technologies
</li><li>Knowledge of current and emerging technologies and processes used within a SOC to improve efficiency and effectiveness.</li><li>Strong communication, writing and interpersonal skills. Strong leadership skills with the ability with the ability to prioritize and execute in a methodical and disciplined manner, as well as to set and manage expectations with stakeholders and team members.</li><li>Strong understanding of security threats and technologies</li><li>Experience with network and host-based security tools</li><li>Experience with incident response procedures and regulations</li><li>Strong analytical and problem-solving skills</li><li>Strong communication and leadership skills</li><li>Strong leadership and team management skills</li></ul></div>

Cybersecurity Analyst - SMP Saudi Aramco

Schweitzer Engineering Laboratories

<div><div><div>Job Description</div></div><div><div><div><div><p>
The devices we make at SEL are embedded in the power grid. They prevent blackouts. They make outages safer and shorter in duration; they add cybersecurity, automation, and communication. They use cutting-edge technologies and operate at speeds that push other pieces of the grid to go faster. As an Application Engineer - Protection, you&rsquo;ll provide solutions and services that help our customers protect and control critical electrical infrastructure and power systems worldwide.</p><p></p><p><b>
As Application Engineer &ndash; Protection, a typical day might include the following:</b></p><ul><li><p>
Develop expertise in power system protection, and all related SEL products.</p></li><li><p>
Help customers apply SEL products through visits, demonstrations, training courses, email, and telephone contact.</p></li><li><p>
Contribute to product specifications, application and testing software, and literature.</p></li><li><p>
Participate in SEL marketing and sales activities and industry technical meetings and conferences.</p></li><li><p>
Teach in customer on-site and online visits, SEL University courses, and hands-on seminars for customers and SEL personnel.</p></li><li><p>
Maintain customer application and quality information, and develop industry relationships.</p></li><li><p>
Other duties as assigned.</p></li></ul><p></p><p><b>
This job might be for you if:</b></p><ul><li><p>
Your educational background is in electrical engineering</p></li><li><p>
You have a strong understanding of power system protection principles, relay protection and control schemes, and relay coordination techniques.</p></li><li><p>
You are familiar with relevant industry standards, such as IEEE, IEC, and NERC/FERC regulations.</p></li><li><p>
You have proven experience in designing and implementing protection and control schemes in a utility or industrial setting.</p></li><li><p>
Demonstrated problem-solving skills and the ability to analyze complex power system protection challenges.</p></li><li><p>
You are willing to travel locally &amp; internationally.</p></li><li><p>
You have strong communication skills in English &amp; Arabic.</p></li></ul><p></p><p><b>
Location
</b></p><p>Saudi Arabia - Khobar</p><p></p><p><b>
Why SEL?
</b></p><p><b>Competitive pay. Superior benefits. Inspiring work.
</b></p><p>We provide and take care of our employees with outstanding benefits, competitive pay, challenging work, and a rewarding career.</p><p>
Top tier medical, prescription, dental, vision, life, and disability insurance.</p><p>
Varied leave plans like annual leaves, sick leaves, parental leaves etc. to maintain a healthy life balance</p><p>
Yearly flight tickets to home country for expat employees and their family members based on their eligibility</p><p>
Developmental programs like tuition assistance, internships, skill development courses and engineering development programs (EDP).</p><p>
Wellbeing benefits like free and confidential Employee Assistance Program (EAP) and reimbursable yearly gym membership</p><p>
International Travel Medical and Security Assistance to assist our traveling employees and accompanying family members worldwide</p><p>
Additional compensation for working on customer sites in the field based on eligibility</p><p></p><p><b>
Pay Range Data</b></p><p>
We base our starting pay offer on location and job-related factors such as candidate experience, training, knowledge, and skills</p><p></p><p><b>
Communication with Applicants</b></p><p>
We communicate with all applicants. If you do not receive a response about your application, please check your SPAM filter or reach out to us at careers@selinc.com.</p><p></p><p>
SEL is an Equal Opportunity Employer: Vets/Disabled.</p></div></div></div></div></div><p></p>

Application Engineer II - Protection

<div><h4 class="jobSectionHeader"><b>Job Summary</b></h4>
<p>
We are seeking a Cyber GRC Specialist to support and advance the company&rsquo;s cybersecurity governance, risk management, and compliance (GRC) initiatives. The successful candidate will collaborate with Security, IT, Legal, Privacy, Compliance, and business teams to identify and manage cyber risk, implement controls, maintain compliance with applicable frameworks and regulations, and support continuous improvement of the security posture. This role requires a pragmatic, consultative approach and the ability to translate technical security concepts into business risk terms.</p>
<h4 class="jobSectionHeader"><b>Key Responsibilities</b></h4>
<h5 class="jobSectionHeader"><b>Governance &amp; Policy</b></h5>
<ul>
<li><p>Develop, maintain, and operationalize cybersecurity policies, standards, and procedures aligned with industry frameworks and regulatory requirements (e.g., NIST CSF, ISO 27001, SOC 2, PCI, relevant regional regulations).</p></li>
<li><p>Support security governance forums and reporting to senior leadership and stakeholders on cyber risk, control effectiveness, and remediation progress.</p></li>
<li><p>Collaborate with cross-functional teams to ensure security requirements are integrated into business processes, projects, and third-party relationships.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Risk Management &amp; Assessments</b></h5>
<ul>
<li><p>Conduct and coordinate risk assessments, control gap analyses, and threat/risk modeling for systems, applications, and third-party services.</p></li>
<li><p>Maintain the risk register, prioritize remediation activities, and track closure of identified vulnerabilities and control deficiencies.</p></li>
<li><p>Perform vendor security and risk assessments; review third-party contracts and recommend appropriate security controls and contractual language.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Compliance &amp; Audit Support</b></h5>
<ul>
<li><p>Support internal and external compliance initiatives, audits, and certifications (e.g., SOC 2, ISO 27001), including evidence collection, control testing, and remediation coordination.</p></li>
<li><p>Monitor regulatory and industry compliance requirements and translate obligations into practical control and process requirements across the organization.</p></li>
<li><p>Prepare and maintain documentation, control narratives, and artifacts required for assessments and regulatory inquiries.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Incident Response &amp; Continuous Improvement</b></h5>
<ul>
<li><p>Participate in incident response planning and post-incident reviews; advise on control improvements and regulatory/contractual notification considerations.</p></li>
<li><p>Collaborate with Security Operations and IT teams to ensure controls are effectively implemented, monitored, and improved based on lessons learned and evolving threats.</p></li>
<li><p>Identify opportunities to automate control monitoring, reporting, and GRC workflows using GRC platforms and security tooling.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Training, Awareness &amp; Advisory</b></h5>
<ul>
<li><p>Develop and deliver role-based security awareness, GRC guidance, and targeted training for employees, contractors, and business partners.</p></li>
<li><p>Provide practical, risk-based advisory to Product, Engineering, IT, and business teams on secure design, control selection, and compliance requirements.</p></li>
<li><p>Act as a trusted advisor for security and compliance questions related to new projects, cloud deployments, and third-party integrations.</p></li>
</ul>
<h4 class="jobSectionHeader"><b>Required Qualifications - Skills &amp; Experience</b></h4>
<ul>
<li><p>Bachelor&rsquo;s degree in Information Security, Computer Science, Cybersecurity, Risk Management, or a related field, or equivalent practical experience.</p></li>
<li><p>3+ years of demonstrated experience in cybersecurity GRC, risk management, compliance, or related roles within a commercial or regulated environment.</p></li>
<li><p>Familiarity with common cybersecurity frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and practical experience applying them.</p></li>
<li><p>Experience performing risk assessments, vendor/security assessments, control gap analysis, and supporting audits or certifications.</p></li>
<li><p>Working knowledge of cloud security concepts (AWS, Azure, GCP), identity and access management, and common security controls.</p></li>
<li><p>Strong written and verbal communication skills with the ability to document controls, prepare executive reports, and communicate with technical and non-technical stakeholders.</p></li>
<li><p>Experience with GRC platforms, ticketing systems, and security assessment tools; comfortable working in cross-functional, fast-paced environments.</p></li>
</ul>
<h4 class="jobSectionHeader"><b>Preferred Qualifications</b></h4>
<ul>
<li><p>Relevant certifications such as CISSP, CISM, CRISC, CGEIT, or certification in GRC platforms preferred.</p></li>
<li><p>Experience supporting SOC 2, ISO 27001, or other compliance programs and working with external auditors.</p></li>
<li><p>Prior exposure to privacy requirements and data protection interactions with cybersecurity controls is a plus.</p></li>
<li><p>Experience in cloud-native environments, DevSecOps practices, and automation of control monitoring is advantageous.</p></li>
</ul>
<h4 class="jobSectionHeader"><b>Work Environment &amp; Compensation</b></h4>
<ul>
<li><p>Full-time role with a hybrid onsite/remote work model; occasional travel may be required for stakeholder meetings, audits, or vendor engagements.</p></li>
<li><p>Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</p></li>
<li><p>Opportunities for professional development, certification support, and career progression within Security, Compliance, and Risk functions.</p></li>
<li><p>Inclusive and respectful workplace culture that values diversity, equity, and work-life balance.</p></li></ul></div>

Cyber GRC Specialist

Explore 195+ Cybersecurity lead engineer in Al Khobar this May. Find roles across top companies and apply now to boost your career.

195 cybersecurity lead engineer jobs In Al Khobar

Cybersecurity Lead Engineer

OT Cybersecurity Architect

Cybersecurity Engineer

Cybersecurity Engineer

Cybersecurity Analyst - SMP Saudi Aramco

Application Engineer II - Protection

Cyber GRC Specialist