وظيفة خبير تهديدات سيبرانية مقيم شاغرة لدى سايڤر (Cipher) في الرياض

Key Responsibilities

• Ensure IT and cybersecurity operations comply with internal policies, standards, and procedures.
• Conduct periodic cybersecurity control assessments, maintain compliance evidence, and track remediation of findings.
• Monitor vulnerability assessment and penetration testing findings, prioritize risks, and follow up on remediation.
• Monitor cybersecurity threat advisories and coordinate recommended actions with relevant teams.
• Maintain incident response plans, playbooks, and escalation procedures.
• Coordinate cybersecurity incidents with the SOC provider and support incident reviews and lessons learned.
• Review IT changes and new projects to identify cybersecurity risks and define security requirements.
• Coordinate user and privileged access reviews and follow up on security tool findings.
• Support cybersecurity awareness initiatives, including phishing simulation campaigns.
• Prepare weekly, monthly, and quarterly cybersecurity reports and support audit activities.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.
• Minimum 5 years of experience in cybersecurity, including compliance and threat readiness activities.
• At least one recognized cybersecurity certification.
• Working knowledge of cybersecurity control frameworks, including NCA ECC, ISO/IEC 27001, and CIS Controls.
• Knowledge of vulnerability management, incident response, access management, and security hardening.
• Strong reporting, coordination, and communication skills.
• Fluency in Arabic and English, both written and spoken.

Preferred Qualifications

• Experience in an on-site or resident cybersecurity role, preferably with a government or education-sector client.
• Certifications such as CISSP, CISM, CISA, CRISC, CompTIA Security+, or ISO/IEC 27001 Lead Implementer / Lead Auditor.
• Hands-on experience with SIEM, EDR, and vulnerability scanning tools.
• Experience conducting cybersecurity tabletop exercises.