data analyst

business analyst Jobs in Riyadh Saudi Arabia

business analyst

business intelligence analyst Jobs in Riyadh Saudi Arabia

business intelligence analyst

resident engineer Jobs in Riyadh Saudi Arabia

resident engineer

risk analyst engineer Jobs in Riyadh Saudi Arabia

risk analyst engineer

incident response analyst

Accenture

<div>About Accenture 
At Accenture, we are committed to delivering innovation and creating value for our clients. We work at the intersection of business and technology to help our clients improve performance and create sustainable value for their stakeholders. Join us and be part of a team that is shaping the future of security solutions.
Job Title: Security Analyst &ndash; Incident Response
Job Summary: 
As a Security Analyst specializing in Security Incident Response, you will play a key role in supporting the organization by building knowledge, participating in problem-solving discussions, and contributing to the development of innovative security measures. This role offers an exciting opportunity for individuals eager to learn and grow in the dynamic field of cybersecurity. Your contributions will be vital in enhancing security strategies and creating a safer digital environment.
Key Responsibilities:<ul><li>
Assist in the design and implementation of security solutions.</li><li>
Support the governance of enterprise security tools and architecture frameworks.</li><li>
Contribute to the development of digital identity and platform security initiatives.</li><li>
Participate in the establishment of a security operations center to enhance threat detection and response.</li><li>
Collaborate with various stakeholders to ensure alignment with security strategies.</li></ul>
Basic Qualifications:<ul><li>
Beginner proficiency in Security Incident Response.</li><li>
Prior experience in relevant related skills is advantageous.</li><li>
Bachelor&rsquo;s Degree in a relevant field of study.</li></ul>
Preferred Qualifications:<ul><li>
Intermediate proficiency in Cybersecurity Awareness.</li><li>
Beginner proficiency in Risk Assessment.</li><li>
Intermediate proficiency in Incident Management.</li><li>
Advanced proficiency in Threat Intelligence.</li><li>
Expert proficiency in Vulnerability Management.</li></ul>
Why Join Us? 
At Accenture, you will have the opportunity to work with diverse teams, tackle complex challenges, and contribute to innovative solutions that make a real impact. We are excited to see how your expertise and contributions will help us and our clients thrive in a rapidly evolving digital landscape.</div>
 
.

SOC L1

Giza Systems EG

<div><h4 class="jobSectionHeader">Job Description</h4>
<div>The L1 SOC Analyst serves as the first line of defense within the Security Operations Center, responsible for monitoring, triaging, and escalating security alerts in accordance with defined procedures and SLAs. The role focuses on initial alert investigation, incident logging, and ensuring accurate and timely escalation to higher-tier analysts when required.

Responsibility:
<ul>
<li>Serve as the first SOC tier to monitor and triage security alerts.</li>
<li>Ensure threat alerts are contextually analyzed and escalated to the next SOC tier when deeper analysis is required.</li>
<li>Provide feedback and comments on relevant data quality and visibility issues.</li>
<li>Monitor and report on the health of the data collection and log ingestion pipelines.</li>
<li>Log security incidents accurately and ensure adequate information is available for L2/L3 analysts.</li>
<li>Generate and distribute scheduled and ad-hoc SOC reports.</li>
<li>Operate independently to investigate and escalate alerts in line with operational requirements and SLA commitments.</li>
<li>Adhere to SOC processes, playbooks, and incident handling procedures.</li>
</ul></div>
<h4 class="jobSectionHeader">Personal Skills</h4>
<div><ul><li>Excellent communication skills</li>
<li>Excellent problem-solving skills.</li>
<li>Ability to support and balance own time among multiple tasks, and lead junior staff when required</li>
<li>Ability to successfully interface with clients (internal and external)</li>
<li>Ability to document and explain technical details in a concise, understandable manner</li>
<li>Excellent command of English</li>
</ul><ul><li>Ability to work independently and as part of a team</li>
</ul></div>
<h4 class="jobSectionHeader">Technical Skills</h4> 
 <div> 
Previous hands-on experience with SIEM technologies (e.g., QRadar, Splunk, LogRhythm, Elastic SIEM).
 
Good knowledge of operating systems, primarily Windows and Linux.
 
Good understanding of networking protocols, concepts, and technologies.
 
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Engineering, or a related field, or equivalent practical experience.
 
Security certifications such as Security+, GSEC, CEH, or similar are a plus.
 
Experience in programming or scripting (e.g., Python, PERL, Java, Shell, PowerShell).
 
Previous experience working as a systems or network administrator.
 
Experience configuring or supporting network security solutions (e.g., SIEM, firewalls, IDS/IPS).
 
Exposure to incident response and digital forensics activities.
 
Previous experience as a penetration tester is an added advantage. 
 
 
</div><h4 class="jobSectionHeader">Education</h4>
<div>Bachelor&rsquo;s in computer science, Digital Forensics, Engineering, other related field, or equivalent</div></div>
 <div><h4 class="jobSectionHeader">Job Details</h4>
<div><div>Job Location</div>
<div>Riyadh, Saudi Arabia</div>
</div><div><div>Company Industry</div>
<div>IT Services</div>
</div><div><div>Company Type</div>
<div>Employer (Private Sector)</div>
</div><div><div>Job Role</div>
<div>Engineering</div>
</div><div><div>Employment Type</div>
<div>Employee</div>
</div><div><div>Job Division</div>
<div>Jafeer</div></div></div>
 <div><h4 class="jobSectionHeader">Preferred Candidate</h4>
<div><div>Career Level</div>
<div>Entry Level</div>
</div><div><div>Years of Experience</div>
<div>Min: 1 Max: 2</div>
</div><div><div>Residence Location</div>
<div>Saudi Arabia</div>
</div><div><div>Nationality</div>
<div>Saudi Arabia</div>
</div><div><div>Degree</div>
<div>Bachelor's degree</div></div></div>

L1 SOC Analyst

<div>About Accenture
Accenture is a leading global professional services company that helps the world&rsquo;s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services&mdash;creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world&rsquo;s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy &amp; Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360&deg; value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360&deg; value we create for our clients, each other, our shareholders, partners and communities. Visit us at www.accenture.com.
Accenture Security
Join Accenture Security to pioneer security solutions that blend risk strategy, digital identity, cyber defense, application security and managed services. Using the coolest next-gen tech, you&rsquo;ll have every chance to stay one step ahead of cybercrime and out-hack the hackers.
Accenture Security provides comprehensive security services &ndash; from security strategy development to business transformation, to managed security services &ndash; on demand and at a global scale to help mitigate risks and take full advantage of advanced technologies and proven risk management models. Our experienced team of global security professionals helps businesses understand their risks and build resilience from the inside out, giving them the confidence to focus on what matters most: innovation and business growth
Responsibilities:<ul><li>
Endpoint Security Management: Deploy, configure, and manage endpoint security solutions, including TrendMicro and Kaspersky, to protect client infrastructure.</li><li>
Database Activity Monitoring (DAM): Implement and manage DAM solutions (IBM Guardium or Imperva) to ensure database security, activity monitoring, and compliance.</li><li>
Threat Detection &amp; Response: Continuously monitor and respond to endpoint and database security threats, providing advanced troubleshooting and remediation.</li><li>
Incident Response: Collaborate with the security operations team to lead the investigation, containment, and remediation of security incidents.</li><li>
Patch Management: Coordinate and ensure endpoint and database systems are updated with the latest security patches and updates.</li><li>
Security Policy Compliance: Ensure endpoint and database security systems align with client and regulatory security policies and standards.</li><li>
Client Support &amp; Delivery: Act as the primary point of contact for security-related issues within the client's environment, providing operational support and maintaining service-level agreements (SLAs).</li><li>
Reporting &amp; Documentation: Generate regular reports on security incidents, threat detection, and system performance. Document system configurations and operational procedures.</li><li>
Collaboration &amp; Mentorship: Work closely with junior team members, mentoring them on endpoint security best practices and DAM operations.</li><li>
Conduct regular security assessments and vulnerability scans to identify potential security weaknesses.</li><li>
Required troubleshooting skills for all end point security system such as AV, CA ,VA, MDM, Data Classification, FIM, HSM/Encryption and DLP solution</li><li>
Expertise on OS Linux, windows and MAC.</li><li>
Skills required related to network component such as routing, Switch</li><li>
Stay up to date on the latest security trends and developments and maintain a high level of technical expertise in the field of endpoint security.</li></ul></div>
 
<div>Qualifications:<ul><li>
4+ years of experience in cybersecurity with a focus on Endpoint Security.</li><li>
Proven expertise with TrendMicro, Blackberry MDM, DigiCert, Tenable, Boldon James, ForcePoint DLP and Kaspersky endpoint security products.</li><li>
Hands-on experience with IBM Guardium or Imperva for database security and monitoring.</li><li>
Strong understanding of threat detection, vulnerability management, and incident response.</li><li>
Familiarity with regulatory frameworks such as ISO 27001, NCA, or PCI-DSS.</li><li>
Excellent problem-solving and analytical skills.</li><li>
Strong communication and interpersonal skills to interact with clients and internal teams.</li><li>
Ability to work independently in a fast-paced, managed services environment.</li><li>
Bachelor's degree in computer science, Information Security, or a related field.</li><li>
Relevant certifications (e.g., TrendMicro Certified Professional, Kaspersky Certified Professional, IBM Guardium Certified, or Imperva DAM certifications) are a plus.</li><li>
Security certifications such as CISSP, Security+.</li></ul>
Why join us?
<ul><li>We offer a transparent, fast paced approach career progression, with a focus on your strengths and continuous coaching from senior colleagues</li><li>
You will benefit from working alongside Accenture experts who are solving some of the biggest industry challenges with innovative thinking and pioneering tools</li><li>
Flexible work arrangements and a range of benefits including competitive rewards</li><li>
You will have access to state-of-the-art technology that will give you the opportunity to deepen your existing skills even as you help create the latest business trends</li><li>
You will also have opportunities to make a difference to the communities in which we work and live</li></ul>
Next Steps
If this sounds like the ideal role, career and company for you, click below to apply.
To learn more about life @AccentureMiddleEast, follow us on social media and keep up with our latest news.
Accenture Middle East: LinkedIn, Instagram, Facebook, Twitter, YouTube</div>

System Security Consultant - Endpoint security

Avensys Consulting

<div>
 
 Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.
 
 
 
 
 
 We are currently looking to hire a Quality Analyst. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.
 
 
 
 
 
 Role: Quality Analyst
 
 
 Location: Riyadh, Saudi Arabia
 
 
 Type: Contract (3 months Contract -extendable)
 
 
 Experience: 1-5 years
 
 
 Note: Looking for Immediate Joiners
 
 
 
 
 
 Responsibilities
 
 
 Ensure incident and request handling meets quality standards: audit tickets for accuracy and SLA adherence, identify trends and process gaps, provide feedback and training to improve resolution quality and reporting.
 
 
 
 
 
 We are seeking a detail-oriented and process-driven Quality Analyst to ensure high standards of service delivery across Incident and Request Management operations. The Quality Analyst will be responsible for conducting regular audits, ensuring SLA compliance, identifying performance gaps, and driving continuous improvement initiatives within the Service Desk/ITSM environment.
 
 
 ________________________________________
 
 
 Key Responsibilities:
 
 
 1. Quality Auditing &amp; Compliance
 
 
 &bull; Conduct periodic audits of incident and service request tickets to ensure accuracy, completeness, and adherence to ITIL/organizational quality standards.
 
 
 &bull; Verify that tickets include proper categorization, prioritization, documentation, and resolution steps.
 
 
 &bull; Ensure compliance with SLAs, response timelines, and escalation protocols.
 
 
 &bull; Identify discrepancies, errors, or incomplete ticket handling and ensure corrective measures are implemented.
 
 
 2. Process Monitoring &amp; Improvement
 
 
 &bull; Analyze recurring issues, ticket trends, and operational patterns to identify process gaps or service delivery inefficiencies.
 
 
 &bull; Recommend improvements to enhance the quality, speed, and consistency of incident and request resolution.
 
 
 &bull; Support the development and refinement of standard operating procedures (SOPs) and knowledge articles.
 
 
 3. Feedback, Coaching &amp; Training
 
 
 &bull; Provide structured feedback to Service Desk agents, L1/L2 teams, and other operational staff based on audit findings.
 
 
 &bull; Conduct refresher training sessions to address common errors, ensure process adherence, and improve overall service quality.
 
 
 &bull; Collaborate with team leads to support capability development and performance enhancement.
 
 
 4. Reporting &amp; Documentation
 
 
 &bull; Prepare monthly/weekly quality reports highlighting audit results, SLA performance, accuracy levels, and improvement areas.
 
 
 &bull; Track and maintain quality metrics, KPIs, and compliance dashboards to support operational decision-making.
 
 
 &bull; Document quality findings, improvement plans, and follow-up actions.
 
 
 5. Stakeholder Collaboration
 
 
 &bull; Work closely with Incident Managers, Service Desk Leads, and Process Owners to ensure quality expectations are met.
 
 
 &bull; Participate in review calls, quality meetings, and RCA discussions to drive continuous improvement.
 
 
 &bull; Support internal audits and assist with compliance requirements as needed.
 
 
 ________________________________________
 
 
 Required Skills &amp; Qualifications:
 
 
 &bull; 2&ndash;5 years of experience as a Quality Analyst in IT Support, ITSM, Service Desk, or a similar environment.
 
 
 &bull; Strong knowledge of ITIL processes, especially Incident, Request, and Problem Management.
 
 
 &bull; Experience in ticketing tools such as ServiceNow, Remedy, JIRA, or similar platforms.
 
 
 &bull; Excellent analytical, auditing, and documentation skills.
 
 
 &bull; Strong communication and interpersonal skills for effective coaching and feedback.
 
 
 &bull; Ability to identify patterns, trends, and process bottlenecks.
 
 
 ________________________________________
 
 
 Preferred Skills:
 
 
 &bull; ITIL Foundation certification.
 
 
 &bull; Experience working with quality frameworks or continuous improvement methodologies (Lean, Six Sigma).
 
 
 &bull; Prior experience in SLA monitoring and reporting.
 
 
 
 
 
 WHAT&rsquo;S ON OFFER:
 
 
 You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.
 
 
 
 
 
 To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to kumar@aven-sys.com Your interest will be treated with strict confidentiality.
 
 
 
 
 
 CONSULTANT DETAILS:
 
 
 Consultant Name: Kumar Ankush
 
 
 Avensys Consulting Pte Ltd
 
 
 Email: kumar@aven-sys.com
 
 
 Call: +65 6727 7653 | Ext: 653
 
 
 
 
 
 Privacy Statement:
 
 
 We take your personal data protection seriously and adhere to both EU and local data protections regulations.
 
 
 Upon submission of your CV, you grant Avensys Consulting permission to retain your personal information in our electronic database, unless you specify otherwise. This data will be used to evaluate your suitability for current and potential job openings within our organization. Should you wish to have your personal data removed at any point, a simple notification to us will suffice.
 
 
 Rest assured, we will not disclose your personal information to any third parties, and we remain steadfast in our commitment to providing equal opportunities to all applicants
 
 
 
</div>

Quality Analyst

ACWA Power

<div>
 
 The Incident Response &amp; Forensics Manager (IT &amp; OT) is responsible for managing and leading the organization's incident response and forensic investigation efforts across both Information Technology (IT) and Operational Technology (OT) environments. This role ensures that security incidents are promptly detected, contained, investigated, and remediated, while also overseeing the collection and analysis of forensic evidence. The manager coordinates across multiple teams to enhance the organization&rsquo;s ability to respond to cyber incidents, minimize damage, and prevent future security breaches within both IT and OT domains.
 
 
 
 
 
 
 KEY ACCOUNTABILITIES:
 
 
 
 
 
 
 
 Incident Response Management (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead and manage the organization's incident response efforts across both IT and OT systems, ensuring rapid detection, containment, and resolution of security incidents.
 </li>
 <li>
 Develop and maintain incident response playbooks, ensuring that they address specific threats to both IT and OT environments.
 </li>
 <li>
 Coordinate with internal teams and external stakeholders to ensure effective communication and collaboration during incident response efforts.
 </li>
 <li>
 Oversee the triage, prioritization, and escalation of security incidents, ensuring that critical threats are addressed in a timely manner.
 </li>
 <li>
 Provide incident response support to both IT and OT infrastructure teams, advising on containment actions and recovery steps.
 </li>
 <li>
 Offer remediation guidance including configuration changes and preventive measures to minimize future threats in both IT and OT systems.
 </li>
 <li>
 Triage alerts from detection platforms, identifying and removing false positives across IT and OT environments.
 </li>
 <li>
 Escalate genuine threats and security incidents to the appropriate teams for further investigation and remediation, ensuring timely and accurate response to both IT-based and OT-based threats.
 </li>
 </ul>
 
 
 
 
 
 Forensic Investigation (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead digital forensic investigations within both IT and OT systems to determine the root cause of security incidents, ensuring the proper collection, preservation, and analysis of digital evidence.
 </li>
 <li>
 Utilize forensic tools and techniques to investigate compromised systems, networks, and devices across IT and OT infrastructures.
 </li>
 <li>
 Ensure that forensic processes adhere to legal and regulatory requirements, and that evidence is documented in a formal and defensible manner for potential legal proceedings.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Analysis (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct continuous monitoring of security events across both IT and OT environments using SIEM, XDR, and other Threat Detection, Investigation, and Response (TDIR) platforms.
 </li>
 <li>
 Analyze telemetry from multiple sources (network traffic, endpoints, OT systems, etc.) to detect and investigate potential cyber threats, ensuring comprehensive coverage across both digital and physical systems.
 </li>
 <li>
 Monitor and analyze security events from various sources&mdash;including SIEM, intrusion detection/prevention systems (IDS/IPS), firewalls, endpoint detection systems, and OT-specific monitoring tools&mdash;to identify potential threats and vulnerabilities.
 </li>
 <li>
 Lead efforts to correlate security information from both IT and OT environments to identify patterns of anomalous behavior and mitigate potential threats.
 </li>
 </ul>
 
 
 
 
 
 Incident Reporting &amp; Documentation:
 
 
 
 
 
 <ul>
 <li>
 Document formal technical incident reports for consumption by IT and OT infrastructure teams and senior leadership, providing detailed information on root causes, affected systems, and next steps.
 </li>
 <li>
 Ensure clear and concise communication of incident details to both IT and OT stakeholders, enabling effective decision-making during and after incidents.
 </li>
 <li>
 Ensure accurate and detailed documentation of all security incidents, including timelines, actions taken, and outcomes, for post-incident reviews and compliance reporting.
 </li>
 <li>
 Prepare formal incident reports and technical summaries for senior management, internal stakeholders, and regulatory authorities as required.
 </li>
 <li>
 Conduct post-incident reviews and lessons learned sessions to identify opportunities for improvement in incident response procedures for both IT and OT environments.
 </li>
 </ul>
 
 
 
 
 
 Collaboration &amp; Coordination:
 
 
 
 
 
 <ul>
 <li>
 Work closely with threat hunting teams to optimize TDIR capabilities by incorporating findings from threat hunting activities in both IT and OT environments.
 </li>
 <li>
 Continuously improve detection and response strategies based on real-world threat activity affecting both IT networks and OT systems.
 </li>
 <li>
 Collaborate with IT engineering, OT operations, cybersecurity teams, and third-party vendors to coordinate response efforts and ensure that both IT and OT systems are fully protected during and after an incident.
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats to both IT and OT systems and ensure that the organization&rsquo;s incident response strategy remains current and effective.
 </li>
 <li>
 Provide incident response support to both IT and OT infrastructure teams, advising on containment actions and recovery steps.
 </li>
 <li>
 Offer remediation guidance including configuration changes and preventive measures to minimize future threats in both IT and OT systems.
 </li>
 </ul>
 
 
 
 
 
 Incident Response Training &amp; Drills:
 
 
 
 
 
 <ul>
 <li>
 Develop and conduct regular incident response simulations and training exercises across both IT and OT teams to ensure readiness for real-world cyber incidents.
 </li>
 <li>
 Ensure that all relevant personnel are trained in their roles during an incident and are familiar with the incident response plan for both IT and OT systems.
 </li>
 </ul>
 
 
 
 
 
 Detection Platform Enhancement (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Work with threat detection content development teams to fine-tune detection platforms and create new detection rules tailored to the unique needs of both IT and OT environments.
 </li>
 <li>
 Continuously enhance detection capabilities to improve alert accuracy and reduce false positives in both IT systems (e.g., endpoints, networks) and OT systems (e.g., SCADA, ICS).
 </li>
 </ul>
 
 
 
 
 
 Root Cause Analysis &amp; Prevention (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct in-depth root cause analysis of security incidents across IT and OT systems, identifying vulnerabilities, misconfigurations, or other weaknesses.
 </li>
 <li>
 Provide recommendations for mitigating future risks, including configuration changes and security controls for both IT infrastructure and OT control systems.
 </li>
 </ul>
 
 
 
 
 
 Policy Development &amp; Incident Response Governance
 
 :
 
 
 
 
 <ul>
 <li>
 Assist in the development and refinement of incident response policies, forensic procedures, and security standards for both IT and OT environments.
 </li>
 <li>
 Ensure that incident response efforts comply with relevant regulatory requirements and industry best practices for both IT and OT sectors.
 </li>
 </ul>
 
 
 
 
 
 compliance &amp; Performance Reporting (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Support the development and execution of compliance reporting for both IT and OT teams, ensuring that security incidents and responses are documented in line with organizational and regulatory requirements.
 </li>
 <li>
 Provide SOC performance reporting to ensure key metrics and Service Level Agreements (SLAs) are met for both IT and OT operations.
 </li>
 </ul>
 
 
 
 
 
 Vulnerability &amp; Exposure Analysis (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct analysis and testing to identify vulnerabilities, misconfigurations, and other exposures across both IT and OT environments.
 </li>
 <li>
 Validate user policies, configurations, and access controls to ensure they align with the security posture of both IT and OT systems, maintaining a holistic security approach.
 </li>
 <li>
 Efficiency &amp; SLA Adherence (IT &amp; OT):
 </li>
 <li>
 Work efficiently to meet SOC metrics and SLAs, ensuring timely and effective response to incidents affecting both IT infrastructure and OT control systems.
 </li>
 </ul>
 
 
 
 
 
 QUALIFICATIONS:
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field (Master's preferred).
 </li>
 <li>
 5+ years of experience in incident response, digital forensics, or cybersecurity operations, with at least 2 years focusing on OT environments.
 </li>
 <li>
 Proficiency in incident response tools, forensic tools, and SIEM platforms (e.g., Splunk, ELK, QRadar).
 </li>
 <li>
 Experience with both IT and OT-specific security platforms (e.g., SCADA, ICS, PLC systems).
 </li>
 <li>
 Knowledge of forensic analysis techniques across networks, endpoints, and OT systems.
 </li>
 <li>
 Familiarity with threat intelligence, malware analysis, and vulnerability management for both IT and OT infrastructures.
 </li>
 </ul>
 
 
</div>

Incident Response & Forensics Manager (IT & OT)

<div>
 
 The Cyber Operations and Threat &amp; Vulnerability Manager (IT &amp; OT) is responsible for overseeing cybersecurity operations, threat detection, vulnerability management, and risk mitigation across both Information Technology (IT) and Operational Technology (OT) environments. This role ensures the organization&rsquo;s IT and OT infrastructures are protected from evolving cyber threats, vulnerabilities, and risks. The manager leads efforts to detect, assess, and remediate security weaknesses while coordinating responses to mitigate potential impacts on both digital and physical systems. This role is critical in ensuring the security posture of the entire organization, encompassing both traditional IT systems and specialized OT environments such as Industrial Control Systems (ICS) and SCADA.
 
 
 
 
 
 
 KEY ACCOUNTABILITIES:
 
 
 
 
 
 
 
 Cyber Operations Oversight (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Manage and oversee daily cyber operations across both IT and OT environments, ensuring consistent security monitoring, incident response, and threat detection.
 </li>
 <li>
 Lead the Security Operations Center (SOC) to monitor and respond to cyber threats in real-time, ensuring a unified approach for both IT and OT infrastructures.
 </li>
 <li>
 Implement and enforce security policies, procedures, and controls tailored to the specific needs of both IT and OT systems, ensuring alignment with industry best practices and regulatory requirements.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Response (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Oversee threat detection and response efforts across the organization using SIEM, XDR, and other specialized security tools for both IT and OT environments.
 </li>
 <li>
 Develop and implement incident response playbooks, ensuring they address potential threats to both IT systems (e.g., networks, servers, endpoints) and OT systems (e.g., SCADA, ICS, PLCs).
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats, vulnerabilities, and attack vectors targeting both IT and OT infrastructures.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Response (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Oversee threat detection and response efforts across the organization using SIEM, XDR, and other specialized security tools for both IT and OT environments.
 </li>
 <li>
 Develop and implement incident response playbooks, ensuring they address potential threats to both IT systems (e.g., networks, servers, endpoints) and OT systems (e.g., SCADA, ICS, PLCs).
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats, vulnerabilities, and attack vectors targeting both IT and OT infrastructures.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Response (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Oversee threat detection and response efforts across the organization using SIEM, XDR, and other specialized security tools for both IT and OT environments.
 </li>
 <li>
 Develop and implement incident response playbooks, ensuring they address potential threats to both IT systems (e.g., networks, servers, endpoints) and OT systems (e.g., SCADA, ICS, PLCs).
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats, vulnerabilities, and attack vectors targeting both IT and OT infrastructures.
 </li>
 </ul>
 
 
 
 
 
 Security Engineering &amp; Hardening (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Work with IT and OT engineering teams to implement security best practices during the design, development, and deployment of new systems.
 </li>
 <li>
 Ensure that all IT and OT systems are hardened against known vulnerabilities and emerging attack vectors by applying patches, configurations, and security controls
 </li>
 </ul>
 
 
 
 
 
 Incident Response &amp; Coordination (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead the organization&rsquo;s incident response efforts across IT and OT systems, ensuring rapid identification, containment, and remediation of security incidents.
 </li>
 <li>
 Coordinate cross-functional teams, including IT, OT, forensics, and legal, to ensure a cohesive response to major incidents affecting both environments.
 </li>
 <li>
 Perform post-incident analysis and root cause investigations to identify gaps in security controls and improve future incident response capabilities.
 </li>
 </ul>
 
 
 
 
 
 Security Monitoring &amp; Optimization (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Continuously monitor the effectiveness of security tools and processes across IT and OT environments, ensuring timely detection and response to potential threats.
 </li>
 <li>
 Work with the threat detection and threat hunting teams to optimize security monitoring tools and improve alert accuracy for both IT and OT systems.
 </li>
 <li>
 Leverage insights from threat intelligence and threat hunting activities to enhance proactive threat detection and response capabilities.
 </li>
 </ul>
 
 
 
 
 
 Collaboration with Cross-Functional Teams:
 
 
 
 
 
 <ul>
 <li>
 Collaborate with IT, OT, and business stakeholders to ensure security operations align with organizational goals and risk management strategies.
 </li>
 <li>
 Work closely with compliance teams to ensure that both IT and OT environments meet regulatory requirements such as NCA, NIST, ISO 27001, NERC-CIP, and ISA/IEC 62443.
 </li>
 </ul>
 
 
 
 
 
 Collaboration with Cross-Functional Teams:
 
 
 
 
 
 <ul>
 <li>
 Collaborate with IT, OT, and business stakeholders to ensure security operations align with organizational goals and risk management strategies.
 </li>
 <li>
 Work closely with compliance teams to ensure that both IT and OT environments meet regulatory requirements such as NIST, ISO 27001, NERC-CIP, and ISA/IEC 62443.
 </li>
 </ul>
 
 
 
 
 
 Security Awareness &amp; Training (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Develop and implement security awareness programs tailored to both IT and OT personnel, ensuring employees understand potential threats and the importance of following security policies.
 </li>
 <li>
 Conduct training sessions for IT and OT teams on incident response, vulnerability management, and secure system configurations
 </li>
 </ul>
 
 
 
 
 
 QUALIFICATIONS :
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (master&rsquo;s degree preferred).
 </li>
 <li>
 6+ years of experience in cybersecurity operations, incident response, or vulnerability management, with experience in OT environments such as ICS/SCADA.
 </li>
 <li>
 Experience managing cybersecurity programs that span both IT and OT environments.
 </li>
 <li>
 Proficiency in SIEM platforms, XDR, and other monitoring tools for both IT and OT infrastructures.
 </li>
 <li>
 Strong hands-on experience with vulnerability management tools (e.g., Tenable, Qualys, Nessus, OT-specific platforms).
 </li>
 <li>
 Deep understanding of IT security controls as well as OT-specific controls for ICS, SCADA, and PLC systems.
 </li>
 <li>
 Knowledge of threat intelligence, incident response, and forensics in both IT and OT environments.
 </li>
 </ul>
 
 
</div>

Cyber Operations and Threat & Vulnerability Manager (IT & OT)

Nizmara Consulting & Executive Search

<div>
 
 At Nizmara Consulting, we pride ourselves on being the premier destination for executive search and talent acquisition, where excellence meets expertise. With a team of seasoned consultants possessing unparalleled industry knowledge and hands-on experience, we specialize in delivering top-tier talent across a diverse range of verticals including;
 
 Technology, Financial Services, Banking &amp; Insurance, Healthcare &amp; Life Sciences,
 
 
 E-commerce &amp; Retail, Construction, Engineering &amp; Manufacturing.
 
 We leverage tailored solutions backed by industry insight, exceptional talent, strategic partnerships, and a proven track record of success boosting business outcomes.
 
 
 
 
 
 We are seeking a highly skilled
 
 Senior Information Security Analyst
 
 to join the team of a prominent FMCG company under the Public Investment Fund (PIF) in Riyadh. This critical role involves overseeing and enhancing the security of the organization&rsquo;s endpoints and firewalls while ensuring robust protection against emerging threats. The ideal candidate will have strong expertise in endpoint security technologies, firewall configurations, and incident response.
 
 
 
 
 
 PS: We will prioritize Saudi Citizens for this specific role as per our client's company policies.
 
 
 
 This position is offered under an outsourced employment model. The hired professional will be engaged by Nizmara and deployed to the client as a full-time consultant. Subject to performance and organizational requirements, the employment may later be transferred to the client&rsquo;s payroll.
 
 
 
 
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Overseeing the security of our endpoints (computers, laptops, mobile devices) and firewalls.
 </li>
 <li>
 Implementing and managing endpoint detection and response (EDR) solutions.
 </li>
 <li>
 Monitoring endpoint security tools for alerts and investigating security incidents.
 </li>
 <li>
 Developing and implementing endpoint security policies and procedures.
 </li>
 <li>
 Deploying and managing endpoint security software, including antivirus, anti-malware, and data loss prevention (DLP) solutions.
 </li>
 <li>
 Configuring and managing firewalls to protect the organization's network.
 </li>
 <li>
 Monitoring firewall logs for suspicious activity.
 </li>
 <li>
 Implementing firewall rules to control network traffic.
 </li>
 <li>
 Troubleshooting firewall issues.
 </li>
 <li>
 Performing security audits of firewall configurations.
 </li>
 <li>
 Participating in incident response activities, including investigating security breaches, containing damage, and implementing remediation measures.
 </li>
 <li>
 Working with other IT teams to implement and maintain security solutions.
 </li>
 </ul>
 
 
 
 
 
 Qualifications:
 
 
 <ul>
 <li>
 In-depth knowledge of endpoint security technologies, including antivirus, anti-malware, EDR, and DLP.
 </li>
 <li>
 Strong understanding of firewall technologies and their operation.
 </li>
 <li>
 Proficiency in network security concepts and protocols.
 </li>
 <li>
 Ability to analyze security logs and identify potential threats.
 </li>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Excellent communication and interpersonal skills.
 </li>
 <li>
 Ability to collaborate effectively with other IT teams and stakeholders.
 </li>
 <li>
 Staying up-to-date on the latest endpoint security threats and vulnerabilities.
 </li>
 <li>
 Staying current on firewall best practices and emerging threats.
 </li>
 <li>
 Typically, 5+ years of experience in information security, with a focus on endpoint security and firewall operation.
 </li>
 <li>
 Experience working in a Security Operations Center (SOC) environment is often preferred.
 </li>
 <li>
 Experience with commercially available off-the-shelf technologies used in a Cybersecurity Operations Center environment is desired.
 </li>
 <li>
 Excellent command of English both written and spoken.
 </li>
 </ul>
 
 
</div>

Senior Information Security Analyst

Explore 192+ Incident response analyst in Riyadh Saudi Arabia this January. Find roles across top companies and apply now to boost your career.