Penetration Testing & Vulnerability Management Expert📣 إعلان

About the Role

The Zakat, Tax and Customs Authority in Riyadh is seeking a Penetration Testing & Vulnerability Management Expert to join their team. This full-time role involves leading work activities and operating with minimal guidance to achieve long-term cybersecurity goals. The expert will act as an internal consultant, providing guidance on operational activities and ensuring the security of information technology systems.

Role Purpose and Scope

This position is responsible for providing expert guidance in conducting cybersecurity assessments and investigations. Key functions include advising on preventive and mitigating procedures, developing use cases, monitoring remediation plans, and contributing to budget inputs. The role requires a proactive approach to identifying and addressing security weaknesses within the organization's infrastructure.

Key Responsibilities

• Conduct cybersecurity program assessments to identify weaknesses and report exposure levels to relevant departments for timely resolution.
• Utilize advanced tools and techniques to discover and exploit security vulnerabilities in IT systems from an attacker's perspective.
• Follow up on remediation plans and ensure proper evaluation of the current technology infrastructure.
• Provide comprehensive reports and recommendations on penetration test results, identified vulnerabilities, actions taken, potential impacts, and corrective/preventive measures.
• Evaluate incoming change requests from various departments to ensure compliance with security standards and requirements.
• Adhere to all relevant standardized operational policies, processes, and procedures to ensure consistent work execution.
• Assist in resolving escalated issues and provide necessary support to less experienced teams to ensure efficient work execution.
• Escalate complex issues to the concerned personnel for appropriate and correct resolution.
• Train less experienced employees on various functional activities to facilitate knowledge transfer, when applicable.
• Provide clear directions, prioritize tasks, assign and delegate responsibility, and monitor the workflow of subordinates/less experienced employees.
• Support less experienced employees or direct subordinates in performing their tasks according to specified policies and procedures.
• Perform other tasks as required by the business.

Qualifications and Experience

• A minimum of 5 years of experience in the field of cybersecurity.
• Bachelor's degree in Computer Science or Cybersecurity, or an equivalent field (required).
• Master's degree in Cybersecurity, or an equivalent field (preferred).

Work Environment

This is a full-time position based in Riyadh, offering an opportunity to contribute to critical cybersecurity initiatives within a governmental authority. The role involves working independently while also providing leadership and support to team members.

Application Process

Candidates meeting the specified qualifications and experience are encouraged to apply for this role to contribute to the Zakat, Tax and Customs Authority's mission.