Requirements
Requires a Bachelor's degree in Computer Science, Information Security, or a related field, with at least 8 years of experience in cloud security, security architecture, or encryption. Must have strong cloud-security knowledge, hands-on experience with CSPM and cloud-native security monitoring tools, and a solid understanding of data encryption, cryptographic controls, and secure cloud architecture. Knowledge of NCA requirements, Zero Trust, least privilege, and cloud risk-management practices is also essential.
Description
Location: On-site - Riyadh, Saudi ArabiaContract/engagement: Project-based managed cybersecurity services (13-month)Minimum experience: 8+ yearsRole PurposeGovern and improve the security posture of cloud environments and encryption controls, ensuring secure storage, processing, transmission, and monitoring of entity data.Key Responsibilities Monitor cloud environments for compliance with approved security policies, standards, and architecture requirements Review the security posture of compute, storage, database, platform, and supporting cloud services Monitor cloud-security tools and dashboards, investigate suspicious activity, and coordinate response with cybersecurity teams Review CSPM findings, misconfigurations, exposed services, policy violations, and unauthorized deployments or Shadow IT Assess third-party cloud services and integrations and track remediation of cloud-security findings through closure Define and review encryption requirements for sensitive data at rest, in transit, and during processing Support governance of cryptographic controls, keys, certificates, and secure integrations in line with Ministry requirements Maintain cloud asset visibility, operational reports, risk status, and remediation accountabilityRequirementsTechnical and Professional Requirements Bachelor's degree in Computer Science, Information Security, or a related field At least 8 years of relevant cloud security, security architecture, or encryption experience, as specified in the workforce table Strong cloud-security knowledge across compute, storage, databases, platform services, IAM, logging, monitoring, network controls, and third-party integrations Hands-on experience with CSPM and cloud-native security monitoring tools Strong knowledge of data encryption at rest and in transit, cryptographic controls, key and certificate management, and secure cloud architecture Knowledge of NCA requirements, Zero Trust, least privilege, and cloud risk-management practicesPersonal Requirements Strong risk judgment and ownership of remediation follow-through Excellent analytical, troubleshooting, and cross-functional coordination skills Clear technical documentation and stakeholder communication Proactive, detail-oriented, and comfortable working across cloud, infrastructure, SOC, IAM, and architecture teamsProfessional CertificationsPreferred: CCSP, CISSP, SABSA, TOGAF, GIAC GCSA, or equivalent. A major cloud-platform security certification is also highly relevant.Application NoteCandidates should clearly state their nationality, years of relevant experience, current location, notice period, and valid professional certifications in their application. Shortlisted candidates may be asked to provide supporting documents and participate in technical interviews.