Sr. Specialist, IT Security

Role Summary

Roles & Responsibilities

• Develop and maintain IT security reference architectures aligned with ISO/IEC 27001, NIST SP 800-53, COBIT 2019, and Saudi regulations (NCA ECC and OTCC).
• Implement, administer, and maintain enterprise security technologies including EDR, next-generation firewalls, IDS/IPS, anti-malware, email and web security gateways, DLP, vulnerability scanners, and SIEM.
• Continuously monitor security alerts, logs, and events; perform triage, investigation, escalation, and remediation of threats and incidents.
• Lead and support security incident response and forensic investigations, including containment, eradication, recovery, and root-cause analysis.
• Conduct risk assessments, vulnerability scans, and configuration reviews across systems, endpoints, networks, and cloud workloads; track findings through to closure.
• Embed security-by-design principles into project systems and patch management processes with IT Infrastructure, Network, Applications, Cloud, and Service Desk teams.
• Apply security baselines, configuration hardening, and patch-management policies across servers, endpoints, and cloud environments (e.g., CIS Benchmarks).
• Administer identity and access governance, including access provisioning, privileged access management (PAM), and periodic user access reviews.
• Ensure secure deployment and configuration of firewalls, network security layers, proxies, and security appliances.
• Develop, enforce, and maintain security policies, standards, and procedures aligned with enterprise governance.
• Support internal and external audits (e.g., ISO 27001, SOC 2, NCA compliance) through evidence collection, access reviews, and remediation tracking.
• Maintain and periodically test disaster recovery and business continuity plans for security systems.

Qualification & Education

• Bachelor's degree in computer science, Information Technology, Cybersecurity, Information Security, or a related field.

Experience

• Minimum 6 years of progressive experience in IT security / cybersecurity, including hands-on experience in security operations, SIEM monitoring, incident response, vulnerability management, and administration of enterprise security technologies.
• Experience in an industrial or manufacturing (OT/IT) environment and with regulatory compliance (ISO 27001, NCA ECC/OTCC) is preferred.