Cyber Security & Data Protection Engineer📣 إعلان

About the Opportunity

A technology-forward Real Estate Development Company based in Riyadh, Saudi Arabia, is seeking a Cyber Security & Data Protection Engineer. This full-time role involves joining an existing IT team to manage the operational security of the company's entire technology estate, encompassing corporate headquarters, project sites, IoT infrastructure, and a cloud platform built end-to-end on Microsoft Azure.

Core Responsibilities

• Secure Azure AI workloads, including Azure AI Foundry/OpenAI, Azure ML, RAG pipelines, and vector stores.
• Govern AI agent identity and access with Microsoft Entra Agent ID/Agent 365, and manage Shadow AI.
• Lead the selection, deployment, and ongoing operation of a SIEM platform, establishing centralized log collection, alert triage, threat hunting, and incident response across all environments.
• Own vulnerability management processes from end to end.
• Configure and maintain perimeter and internal security controls, including NGFW (Fortinet FortiGate), IPS/IDS, network segmentation, and secure remote access (ZTNA/VPN).
• Enforce zero-trust principles across user, device, and workload access.
• Secure all OT/IoT and smart building systems (BMS, access control, CCTV, IoT sensors) through segmentation and monitoring.
• Administer security controls in Entra ID/Active Directory for human, workload, and agent identities.
• Secure Microsoft 365 and Azure workloads.
• Support secure SDLC and review the security of internally developed, AI-enabled, and SaaS-delivered applications.
• Coordinate with system integrators and MSSPs, and review third-party and vendor security posture.
• Maintain and test the incident response plan, leading containment, eradication, and recovery efforts.
• Validate backup integrity and participate in Disaster Recovery (DR) testing aligned to RTO/RPO targets.

Data Protection and Governance

• Maintain PDPL compliance, covering data classification, data residency, consent, breach-notification readiness, and records of processing.
• Conduct risk assessments, support internal and external audits, and maintain security documentation, policies, and SOPs.
• Lead the organization's data protection and privacy, ensuring compliance with applicable laws, regulations, and policies.
• Develop and maintain data protection policies, procedures, and governance frameworks.
• Oversee data inventories, privacy risk assessments, and third-party data processing arrangements.
• Deliver privacy awareness and training programs and monitor ongoing compliance through audits and reviews.
• Serve as the primary point of contact for data protection matters with internal and external stakeholders.

Required Qualifications and Experience

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5-8 years of hands-on cybersecurity engineering experience, with at least 2 years owning security across networks, systems, and applications.
• Proven track record owning cybersecurity operations in an Azure-native enterprise environment.
• Practical experience acting as, or directly supporting, a Data Protection function under PDPL or equivalent regulations.

Technical Skills and Knowledge

• Hands-on experience with Microsoft Sentinel/Defender XDR, Fortinet FortiGate, and Entra ID security controls.
• Experience with ISO 27001, NIST frameworks, vulnerability management, incident response, and Identity & Access Management (IAM).
• Familiarity with IoT/OT security and smart building environments is considered an advantage.

Work Environment

This role operates within a dynamic IT team, focusing on securing a comprehensive technology estate that includes corporate infrastructure, project sites, IoT, and a cloud platform built entirely on Microsoft Azure.