Information Security Sr. Specialist

About the Role

Lifera is seeking an Information Security Sr. Specialist to join its team in Riyadh, Saudi Arabia. This full-time role is critical for protecting the organization’s information assets through the implementation, monitoring, and continuous improvement of cybersecurity controls. The specialist will ensure effective risk management, incident response, and security governance, collaborating with IT teams to maintain a secure and resilient technology environment.

Key Responsibilities

• Develop, review, and implement information security controls, policies, procedures, and standards to ensure consistent security practices.
• Participate in internal and external audits by preparing documentation, evidence, and follow-up actions.
• Ensure security practices align with global cybersecurity standards and organizational IT frameworks.
• Monitor security alerts, logs, and events using security monitoring tools such as MS Defender, SIEM, endpoint protection, and network security tools.
• Investigate security incidents, coordinate containment and recovery actions, and conduct post-incident analysis.
• Identify system and application vulnerabilities and ensure timely remediation in collaboration with infrastructure and application teams.
• Design, implement, and maintain security solutions including firewalls, IAM, PAM, encryption, network/cloud security, endpoint protection, identity and access management tools, email security gateways, and data protection solutions.
• Ensure systems are properly configured, updated, and aligned with security best practices.
• Secure cloud workloads in Microsoft, Google, AWS, and hybrid environments in line with best practice and NCA cloud guidelines.
• Conduct regular risk assessments, identify gaps, and recommend appropriate mitigation strategies.
• Review systems, solutions, and third-party services to ensure secure design and configuration.
• Maintain documentation of risks, controls, and mitigation actions.
• Support the delivery of security awareness campaigns and targeted training sessions for employees.
• Provide guidance on secure behavior, emerging threats, and preventive practices.
• Act as the point of contact for all security-related matters within IT projects and initiatives.
• Collaborate with internal teams and external vendors to ensure cohesive and secure project execution.
• Provide advisory support to maintain secure configurations and protect sensitive information.

Qualifications and Experience

• A minimum of 5 to 10 years of experience in information security.
• Demonstrated experience in implementing and managing cybersecurity controls.
• Proficiency with security monitoring tools and incident response procedures.
• Experience with cloud security in various environments (Microsoft, Google, AWS, hybrid).

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, requiring active collaboration with internal IT teams and external vendors.