البحر الأحمر الدولية تعلن عن وظيفة مساعد مدير إدارة الثغرات في الرياض

Be the change. Join the world’s most visionary developer.

Red Sea Global (RSG) is showing that there is a better way to positively shape the places we live, work and travel.

We are purpose-driven and committed to people and planet. Our transformative programs are a driving force to achieving Vision 2030, as well as leading the world towards regenerative tourism.

Join RSG and be part of the positive change for Saudi Arabia and the world.

Job Purpose

Supervise the end-to-end vulnerability management lifecycle across RSG's systems, networks, applications, and cloud assets, ensuring continuous exposure visibility and timely remediation execution.

KEY RESPONSIBILITIES/ ACCOUNTABILITIES

/ Include not limited too

• Maintain a continuously updated asset inventory spanning on-premises, cloud, mobile, and OT environments, mapping exposures against asset criticality and business risk context.

• Plan and execute continuous vulnerability scanning, configuration assessments, and misconfiguration detection across RSG's digital infrastructure to ensure comprehensive coverage.

• Prioritize identified vulnerabilities using risk-based frameworks that integrate asset criticality ratings, threat intelligence feeds, and exploit likelihood scoring.

• Coordinate with remediation teams, including infrastructure, application, and cloud owners. to guide patching activities, configuration changes, and compensating control implementation.

• Track and verify remediation progress through structured retesting cycles, validating fixes and confirming closure of open findings in line with defined SLAs.

• Produce vulnerability status reports and dashboards covering open findings, remediation progress, aging metrics, and overall exposure reduction trends for senior stakeholder review.

• Maintain and continuously improve the vulnerability management policy, process workflows, toolchain configuration, and governance documentation in alignment with cybersecurity standards.

• Support the integration of vulnerability management controls into DevOps and CI/CD pipelines, contributing to secure development practices across RSG's technology delivery lifecycle.

• Contribute to the automation of vulnerability management workflows through scripting and orchestration tools to enhance scanning efficiency and reduce manual effort.

KNOWLEDGE AND EXPERIENCE

Academic Qualifications

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Professional Certifications

• Certified Ethical Hacker (CEH) - Preferred
• CompTIA Security+ - Preferred
• GIAC Vulnerability Assessment Analyst (GEVA) - Preferred

Skills

• Asset Discovery and Inventory Management
• Vulnerability Scanning and Tool Operation
• Risk-Based Vulnerability Prioritization
• Patch Management Coordination and Remediation Tracking
• Automation of Vulnerability Management Workflows
• Vulnerability Metrics Reporting and Dashboard Creation
• Cloud Vulnerability Management
• Secure DevOps / CI/CD Vulnerability Integration
• OT and Industrial Control Systems Security

Experience

Years & Nature of Experience

Minimum 6 years of experience in cybersecurity, vulnerability management, vulnerability assessment, remediation coordination, and security risk management within enterprise environments. Experience in cloud security, exposure management, and cross-functional collaboration with infrastructure, application, and security teams is preferred.