Specialist I Cybersecurity📣 إعلان

About the Role

Al-Ayuni Investment and Contracting Company is seeking a Specialist I Cybersecurity to join their team in Riyadh, Saudi Arabia. This full-time role is central to strengthening and securing the IT infrastructure across the company's subsidiaries, joint ventures, and projects. The specialist will be responsible for implementing Group cybersecurity standards, providing technical guidance, and ensuring compliance with all cybersecurity requirements. The role also requires adherence to organizational policies and safety protocols, contributing to a productive and secure work environment.

Cybersecurity Implementation and Technical Operations

• Lead the implementation and operational support of cybersecurity controls across various environments.
• Implement, configure, and maintain cybersecurity solutions, including firewalls, EDR, IAM, MFA, email security, and SIEM.
• Perform security hardening of servers, endpoints, operating systems, network devices, cloud platforms, databases, and business applications.
• Secure Microsoft 365, Microsoft Azure, cloud platforms, and hybrid infrastructure environments through appropriate controls.
• Collaborate with Infrastructure, Applications, and Digital teams to integrate cybersecurity requirements into technology implementations.

Security Assessment and Compliance

• Assess the cybersecurity posture of subsidiaries, joint ventures, and projects to identify risks, vulnerabilities, and compliance gaps.
• Conduct vulnerability assessments, cybersecurity health checks, and technical compliance reviews across infrastructure, cloud, and business applications.
• Coordinate remediation activities, validate corrective actions, and verify the closure of identified security vulnerabilities.
• Support cybersecurity audits, risk assessments, and compliance activities to align with corporate standards and regulatory requirements.
• Monitor cybersecurity performance through dashboards and metrics, preparing technical reports for management.

Infrastructure and Application Security

• Review the security architecture of infrastructure, cloud, and technology projects for compliance with secure design principles.
• Evaluate application architecture and configurations to identify security weaknesses and recommend mitigation measures.
• Review firewall configurations, VPN connectivity, remote access solutions, network segmentation, and third-party integrations.
• Validate remediation of infrastructure and application security findings, confirming effective implementation of recommended controls.
• Ensure infrastructure and business applications comply with corporate cybersecurity standards, regulatory requirements, and industry best practices.

Incident Response and Technical Advisory

• Support the investigation, analysis, and resolution of cybersecurity incidents affecting company environments.
• Perform root cause analysis following incidents and recommend corrective and preventive actions to reduce recurring risks.
• Coordinate with subsidiary IT teams to ensure timely implementation of cybersecurity recommendations and security improvements.
• Provide technical guidance and cybersecurity expertise to IT teams on security controls, technologies, and implementation best practices.
• Prepare technical security assessments, cybersecurity reports, and implementation updates to support management decision-making.

Qualifications and Experience

• Bachelor's Degree in Cybersecurity, Computer Science, IT, or an equivalent field.
• 4-5 years of relevant experience in cybersecurity.