Cybersecurity Analyst📣 Job Ad

About the Role

Yanbu Aramco Sinopec Refining Company (YASREF) Ltd. is seeking a skilled Cybersecurity Analyst to join its team in Yanbu, Al Madinah, Saudi Arabia. This full-time position is essential for protecting YASREF's digital assets and ensuring compliance with internal and external security mandates. The Cybersecurity Analyst will play a key role in developing, implementing, and maintaining robust information security programs to defend critical systems and data against evolving cyber threats.

Role Overview and Responsibilities

This role involves a comprehensive approach to cybersecurity, focusing on access management, policy development, incident response, and continuous risk assessment. The Cybersecurity Analyst will be instrumental in translating cybersecurity best practices into actionable security controls and programs within a complex organizational environment. Key responsibilities include:

• Determining and managing information access requirements, and planning, coordinating, and implementing comprehensive information security programs.
• Monitoring and advising on information security matters to ensure the effective operation and maintenance of YASREF's internal Cybersecurity controls.
• Participating in the development and publication of Cybersecurity policies, procedures, standards, and guidelines, ensuring alignment with best practices and compliance requirements.
• Reviewing and addressing violations of computer security procedures, and engaging with violators to prevent recurrence.
• Coordinating and executing Cybersecurity projects across YASREF.
• Promptly alerting top management and the Information Technology department to Cybersecurity suspicions and incidents.
• Participating in organization-wide data classification assessments and security audits.
• Contributing to the creation of cryptographic protocols for encrypting sensitive data, including emails and files.
• Participating in the development and refinement of incident response plans, annual IT risk assessments, and associated risk mitigation and avoidance strategies.
• Documenting Cybersecurity incidents, emergency measures taken, and procedures and tests conducted.
• Collaborating with government IT departments and the legal department to ensure compliance with safety and security regulations, and implementing policies mandated by law enforcement agencies to manage security vulnerabilities.
• Developing, managing, and maintaining user security awareness programs for all computer users.
• Contributing to YASREF's efforts to achieve and maintain ISO 27001 Information Security Management certification.
• Participating in risk assessment processes for both existing and new projects, ensuring comprehensive Cybersecurity compliance.
• Creating and editing cybersecurity-related documentation, including writing technical specifications to assess the application of security safeguards against vulnerabilities.
• Providing essential support for Industrial Control Systems (ICS), Electrical Automation Systems, Cybersecurity systems, and network operations.
• Engaging in Cybersecurity research to stay abreast of the latest security issues and actively participating in the continuous education of Cybersecurity practices.
• Performing other job-related duties as assigned by the direct supervisor.

Qualifications and Experience

• Bachelor’s Degree in Computer Science, IT, Computer Engineering, or an equivalent field.
• Possession of a relevant Cybersecurity certification.
• A minimum of 5 years of relevant work experience in cybersecurity.

Required Skills and Expertise

• Cybersecurity
• Information Security
• Risk Assessment
• Incident Response
• Auditing
• Security Policies
• Network Security
• Data Classification
• Cryptography
• User Security Awareness
• Industrial Control Systems (ICS) Security
• Electrical Automation Systems Security

Work Environment and Location

This is a full-time position located in Yanbu, Al Madinah, Saudi Arabia, with the cities of Yanbu and Medina being relevant locations. The role requires a dedicated professional committed to maintaining a secure digital environment.