Consultant Cybersecurity Application Architecture

About the Role

علم is seeking a Consultant - Cybersecurity, Application Architecture to join their team in Riyadh. This full-time role involves leading and supporting cybersecurity activities, assessing security risks, strengthening controls, and ensuring compliance with cybersecurity requirements. The consultant will contribute to the protection of Elm’s information assets, systems, and digital services, enabling secure business operations and improving cybersecurity maturity.

Role Purpose and Context

The primary purpose of this role is to ensure cybersecurity practices are implemented in alignment with approved policies, procedures, regulatory requirements, and information security standards. The consultant will coordinate with internal stakeholders and contribute to Elm’s strategic and operational objectives by enabling secure business operations and improving overall cybersecurity maturity. This position requires 2-5 years of relevant experience.

Key Responsibilities

• Lead assigned cybersecurity governance activities to ensure alignment with approved policies, standards, and regulatory requirements.
• Support the review and implementation of cybersecurity frameworks, procedures, and control requirements.
• Coordinate with stakeholders to ensure cybersecurity requirements are understood and applied across assigned areas.
• Conduct cybersecurity risk assessments for systems, services, processes, and business initiatives, identifying security risks, control gaps, threats, and vulnerabilities.
• Recommend practical mitigation actions and follow up on risk treatment plans.
• Assess the effectiveness of cybersecurity controls, identify areas for improvement, and validate alignment with internal requirements.
• Support continuous improvement of control design, implementation, and monitoring practices.
• Support compliance activities related to cybersecurity regulations, internal policies, and applicable standards, including evidence collection, gap analysis, and remediation follow-up.
• Provide cybersecurity guidance to business and technical teams and advise on secure implementation practices for projects and initiatives.
• Support cybersecurity monitoring activities by reviewing security alerts, trends, and reported incidents.
• Coordinate with technical teams to investigate security events and support incident response activities.
• Support vulnerability assessment activities, prioritize risks, and follow up on remediation actions.
• Monitor emerging cybersecurity threats and contribute to awareness of risks relevant to Elm’s environment.
• Prepare cybersecurity reports, dashboards, and status updates covering risks, controls, compliance, incidents, and improvement actions.
• Analyze cybersecurity performance indicators to identify trends, gaps, and opportunities for improvement.
• Contribute to initiatives that enhance cybersecurity maturity, operational resilience, and protection of information assets.
• Comply with all relevant departmental policies, processes, standard operating procedures, instructions, safety, quality, environmental management, and information security practices.

Experience and Qualifications

• A minimum of 4-6 years of experience in cybersecurity or a related field.
• Demonstrated ability to assess security risks and strengthen controls.
• Experience with cybersecurity frameworks, procedures, and control requirements.
• Proficiency in conducting cybersecurity risk assessments and identifying vulnerabilities.
• Strong understanding of cybersecurity regulations, internal policies, and applicable standards.

Work Environment

This is a full-time position based in Riyadh, where the successful candidate will work within a professional team dedicated to enhancing Elm's cybersecurity posture and protecting its digital assets.

Application Process

Candidates who meet the specified requirements are encouraged to apply for this role. Salary details will be discussed during the interview process.