وظيفة مهندس أمن سيبراني لدى Road Cafe في الرياض

Job Purpose

The Cybersecurity Specialist is responsible for safeguarding the organization’s digital infrastructure, information systems, and data assets against cyber threats. This role ensures the continuous monitoring of security controls, swift incident response, risk management, and strict alignment with Saudi national cybersecurity frameworks (such as the NCA Essential Cybersecurity Controls) and international

standards.

Key Responsibilities

• Governance & Compliance (NCA Alignment): Implement, monitor, and maintain security frameworks in strict compliance with the Saudi National Cybersecurity Authority (NCA) mandates (e.g., ECC, CSCC), NIST, PDPL & ISO 27001.
• Threat Monitoring & Incident Response: Monitor security logs, networks, and systems via SIEM (Security Information and Event Management) tools for unusual, unauthorized, or malicious activity. Lead or assist in the containment, eradication, and investigation of security breaches.
• Risk Assessments & VAPT: Conduct regular vulnerability assessments and coordinate penetration testing (VAPT) across infrastructure, cloud platforms, and applications. Maintain and update the organizational Cybersecurity Risk Register.
• Security Architecture Support: Review system configurations, firewalls, network architectures, and cloud deployments (hybrid/on-premises) to ensure they follow "Zero Trust" and defense-in-depth principles.
• OT/ICS Security (For Energy/Industrial sectors): Support the security of Operational Technology (OT) and Industrial Control Systems (ICS/SCADA).
• Reporting & Auditing: Prepare technical and executive reports (weekly, monthly, quarterly) on the organization's security posture and actively facilitate internal or third-party compliance audits.

Education & Experience

• Degree: Bachelor’s degree in Cybersecurity, Information Security, or a related field.
• Experience: 5 to 8 years of progressive experience in cybersecurity operations, risk management, or compliance, network and firewall.

Technical Skills

• Deep understanding of core networking protocols, firewalls, endpoint protection, and encryption standards.
• Hands-on experience with security tools (SIEM, EDR, Vulnerability Scanners like Nessus/Qualys).
• Thorough knowledge of frameworks like NCA ECC, NIST CSF, ISO 27001 & PDPL.
• Deep knowledge and Hands on Fortinet Firewall
• Must be CCNA/CCNP certified

Soft Skills

• Strong critical thinking, analytical, and digital forensic problem-solving skills.
• Excellent verbal and written communication skills to present complex technical data clearly to non-technical stakeholders. · Ability to work effectively under pressure during active incident response scenarios.

Preferred Professional Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• CompTIA Security+ / CySA+ (For entry to mid-level) · Certified Ethical Hacker (CEH) or GIAC certifications