IT Cybersecurity Specialist

About the Role

CAMCO - Capital Metro Company is seeking an IT Cybersecurity Specialist to join their team in Riyadh, Saudi Arabia. This full-time role is crucial for maintaining the security and integrity of CAMCO's information systems and data. The specialist will implement, monitor, and maintain various cybersecurity measures to protect the organization from internal and external threats.

Role Context and Purpose

The IT Cybersecurity Specialist works collaboratively with cross-functional teams to assess risks, develop robust security strategies, and implement solutions that align with industry best practices and regulatory requirements. This position is responsible for ensuring the continuous protection of the company's digital assets and infrastructure.

Key Responsibilities

• Implement and manage endpoint protection solutions, including antivirus, EDR, and DLP tools.
• Maintain firewalls, intrusion detection/prevention systems, and other network security tools.
• Configure and manage secure access solutions such as VPNs and identity management tools.
• Manage user access, permissions, and roles across systems and applications, ensuring adherence to least privilege principles.
• Conduct regular vulnerability assessments and penetration testing on IT systems, prioritizing and remediating identified vulnerabilities.
• Evaluate and document IT/OT risks, proposing appropriate mitigation strategies.
• Monitor networks, systems, and applications for security events and anomalies.
• Investigate, document, and respond to cybersecurity incidents, performing root cause analysis to prevent future occurrences.
• Implement and manage data encryption and other protection mechanisms for sensitive information.
• Ensure robust data backup and recovery plans are in place and tested regularly.
• Participate in the IT/OT change management process to assess the security impact of proposed changes.
• Conduct security audits, risk assessments, and compliance checks to identify gaps and recommend improvements.
• Provide guidance and support to end-users regarding cybersecurity best practices, policies, and procedures.
• Collaborate with external vendors and partners to assess and manage third-party security risks.
• Assist in developing and delivering cybersecurity awareness and training programs for employees.
• Stay informed about legal and regulatory changes related to cybersecurity and privacy.

Qualifications and Experience

• A minimum of 5 to 10 years of experience in cybersecurity or a related IT field.
• Demonstrated experience in implementing and managing various cybersecurity measures and technologies.
• Proven ability to assess risks, develop security strategies, and implement solutions.

Work Environment

This is a full-time position based in Riyadh, Riyadh, Saudi Arabia. The role involves working closely with various internal teams and external partners to maintain a secure operational environment.

Application Process

Salary for this position will be disclosed during the interview process. Interested candidates are encouraged to apply.