وظيفة أخصائي أمن سيبراني شاغرة لدى El Seif Operation and Maintenance في الرياض

Job Title: IT Security Specialist

Department: Group Information Technology

Location: Riyadh, Saudi Arabia

Employment Type: Full-time

Nationality Requirement: Saudi (Mandatory)

Note: This position is restricted to Saudi Nationals only in accordance with applicable Saudi Arabian regulatory and compliance requirements. Applications from non-Saudi candidates will be automatically disqualified and will not proceed to profile review.

Experience: Minimum 5 years

Reporting To: Head of Information Security / Group Director of IT

About the Role

ESOM Holding is seeking an experienced IT Security Specialist to protect the organization’s digital assets, technology infrastructure, applications, and information systems.

The role combines hands-on cybersecurity assessments, penetration testing, governance, risk management, compliance, and IT security service management. The successful candidate will support alignment with Saudi cybersecurity requirements, including NCA ECC, CSCC, and SAMA CSF where applicable, within an ITIL-aligned environment.

Key Responsibilities

• Conduct vulnerability assessments and penetration testing across networks, infrastructure, wireless systems, applications, and cloud environments.
• Perform static and dynamic application security testing, including SAST and DAST, and provide practical remediation recommendations.
• Develop and maintain information security policies, procedures, risk registers, standards, and cybersecurity compliance documentation.
• Support alignment with Saudi cybersecurity frameworks, including NCA ECC and CSCC, and coordinate internal and external cybersecurity audits.
• Review system and network architectures, monitor emerging threats, assess third-party security risks, and ensure secure-by-design practices.
• Manage security incidents, root-cause investigations, service continuity controls, security records, KPIs, and CMDB updates within an ITIL-aligned environment.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Minimum 5 years of dedicated experience in infrastructure security, application security testing, penetration testing, or cyber governance.
• Hands-on experience with tools such as Nessus, Burp Suite, Metasploit, Wireshark, or Acunetix.
• Strong understanding of network protocols, firewalls, identity and access management, encryption standards, and secure coding practices.
• Strong knowledge of Saudi cybersecurity compliance frameworks, particularly NCA ECC and CSCC.
• Working knowledge of ITIL service management, incident management, problem management, and service continuity.
• Professional proficiency in both Arabic and English.

Preferred Qualifications

• Cybersecurity certification such as CEH, OSCP, CISSP, CISM, or CompTIA Security+.
• ITIL Foundation certification.
• Experience with SAMA CSF, cloud security, third-party risk assessments, or enterprise cybersecurity audits.