وظائف مفتش أمن - الرياض السعودية

<h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">About the Role</h3> <p style="margin:0 0 12px; ************;">BAE Systems Saudi Arabia is seeking an experienced <strong style="font-weight:700;">Cyber Integration Manager</strong> to join its team in Riyadh. This full-time position is open to Saudi National professionals with 5-10 years of experience in the field. The role focuses on ensuring robust cybersecurity integration across various projects and systems within the organization.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Key Responsibilities</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Engage with the Project Management function to oversee project operations readiness reviews, ensuring all necessary documents, tasks, and processes are created and transitioned to Cyber Operations or Engineering.</li> <li style="margin:0 0 6px;">Lead and manage security projects, ensuring timely delivery, adherence to scope, and alignment with business needs.</li> <li style="margin:0 0 6px;">Collaborate effectively with cross-functional teams, including IT, DevOps, Network, and various business units.</li> <li style="margin:0 0 6px;">Stay informed about emerging technologies and evolving threat landscapes, ensuring alignment with BAE Systems Group Cyber Security Standards.</li> <li style="margin:0 0 6px;">Contribute to defining the long-term cybersecurity engineering roadmap, in alignment with Security Product, IM&amp;T KSA, and Group IM&amp;T strategies.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Security Architecture and Technology Management</h3> <p style="margin:0 0 12px; ************;">This role involves designing and supervising the implementation of security controls across BAE Systems KSA. The manager will ensure that all security solutions adhere to Confidentiality, Integrity, and Availability principles and align with BAE Systems Group Cyber Security Standards. Responsibilities also include overseeing the evaluation, selection, deployment, and maintenance of critical cybersecurity tools and platforms, such as firewalls, SIEM, and endpoint protection, while driving continuous improvement and scalability of existing security technologies.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Governance, Risk, and Compliance</h3> <p style="margin:0 0 12px; ************;">The Cyber Integration Manager will ensure that engineering designs comply with BAE Systems Group Cyber Security Standards and meet audit expectations. This includes providing evidence of control effectiveness and actively participating in internal and external audits conducted within BAE KSA Networks.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Required Experience and Attributes</h3> <p style="margin:0 0 12px; ************;">Candidates should possess 5-10 years of relevant professional experience. A key requirement for this role is the ability to manage multiple tasks and responsibilities effectively within a deadline-oriented environment, demonstrating flexibility with work hours as needed.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Work Location</h3> <p style="margin:0 0 12px; ************;">This full-time position is based in Riyadh, Saudi Arabia.</p>

<h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">About Exequt</h3> <p style="margin:0 0 12px; ************;">Exequt is a rapidly expanding consulting and technology services firm. We specialize in cybersecurity, Identity and Access Management (IAM), cloud solutions, AI-driven platforms, and custom software engineering. Our firm partners with both public and private sector organizations to deliver high-impact digital transformation initiatives across the Kingdom of Saudi Arabia.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">The Role: Cybersecurity Incident Response Specialist</h3> <p style="margin:0 0 12px; ************;">Exequt is seeking a <strong style="font-weight:700;">Cybersecurity Incident Response Specialist</strong> to join our team in Riyadh, Saudi Arabia. This full-time role focuses on investigating, containing, eradicating, and recovering from security incidents across various client environments, including endpoints, networks, identities, cloud platforms, and applications. The specialist will play a critical role in helping clients effectively respond to and learn from real-world cyber threats.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Key Responsibilities</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Investigate and respond to cybersecurity incidents such as ransomware, malware, phishing, account compromise, data theft, and lateral movement.</li> <li style="margin:0 0 6px;">Perform incident triage, investigation, containment, eradication, and recovery procedures.</li> <li style="margin:0 0 6px;">Conduct threat hunting activities and perform root-cause analysis for security incidents.</li> <li style="margin:0 0 6px;">Execute basic digital forensics and malware analysis tasks.</li> <li style="margin:0 0 6px;">Identify and analyze Indicators of Compromise (IOCs) and Indicators of Attack (IOAs), mapping attacks to the MITRE ATT&amp;CK framework.</li> <li style="margin:0 0 6px;">Investigate security events within Windows, Linux, Active Directory, and cloud environments.</li> <li style="margin:0 0 6px;">Utilize Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR)/Extended Detection and Response (XDR) platforms for security event investigation.</li> <li style="margin:0 0 6px;">Develop and improve incident response playbooks and detection rules.</li> <li style="margin:0 0 6px;">Prepare detailed incident reports, timelines, and remediation recommendations.</li> <li style="margin:0 0 6px;">Support Security Operations Center (SOC)/Computer Security Incident Response Team (CSIRT) operations and critical incident response efforts.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Required Qualifications and Skills</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Strong experience in Incident Response (IR), Digital Forensics and Incident Response (DFIR), Security Operations Center (SOC), or Threat Hunting.</li> <li style="margin:0 0 6px;">Hands-on experience with security platforms such as Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender, or Cortex XDR.</li> <li style="margin:0 0 6px;">Strong knowledge of Windows and Linux operating systems, as well as networking principles.</li> <li style="margin:0 0 6px;">Proficiency in scripting languages such as PowerShell, Python, or Bash.</li> <li style="margin:0 0 6px;">Strong understanding of the MITRE ATT&amp;CK framework and common attack techniques.</li> <li style="margin:0 0 6px;"><strong style="font-weight:700;">Saudi Nationality is required for this position.</strong></li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Preferred Experience</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Experience investigating specific incident types including ransomware, phishing, credential theft, and endpoint compromise.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Work Environment and Compensation</h3> <p style="margin:0 0 12px; ************;">This is a full-time position based in Riyadh, Saudi Arabia. Compensation for this role is structured on a performance-based model. We are looking for a dedicated professional who thrives on investigating and neutralizing security threats to join our team.</p>

<h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">About Almosafer</h3> <p style="margin:0 0 12px; ************;">Almosafer is recognized as Saudi Arabia’s leading travel company, actively shaping the future of the travel industry. The company serves millions across every segment of the travel and tourism ecosystem, with a focus on making every journey seamless, personal, and purposeful. Almosafer's vision is to be the undisputed leader in travel services, fostering lasting connections and setting new benchmarks for excellence within the Kingdom and beyond.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">The Role: Specialist - IT Security</h3> <p style="margin:0 0 12px; ************;">Almosafer is seeking a <strong style="font-weight:700;">Specialist - IT Security</strong> to join its team in Riyadh. This full-time position requires 2-5 years of relevant experience. This role is distinct from typical IR or analyst positions, involving a significant portion of project work balanced with operational duties such as detection engineering and incident response. The ideal candidate will be a systems and software engineer who approaches complex security problems fundamentally from first principles, ready to drive innovative security projects within a global team.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Key Responsibilities</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Build, deploy, and maintain large-scale security systems across Almosafer's ecosystem.</li> <li style="margin:0 0 6px;">Research, innovate, and improve security capabilities through new and enhanced tooling.</li> <li style="margin:0 0 6px;">Develop smart automation strategies to reduce the need for manual alert triage.</li> <li style="margin:0 0 6px;">Conduct detection engineering to increase coverage, identifying malicious activities across Almosafer’s endpoints, infrastructure, networks, and cloud environments.</li> <li style="margin:0 0 6px;">Investigate alerts and potential incidents end-to-end, including digital forensics, malware analysis, and threat intelligence as needed.</li> <li style="margin:0 0 6px;">Lead incident response efforts and respond to intrusion attempts and suspicious activities, collaborating with multiple Almosafer teams.</li> <li style="margin:0 0 6px;">Participate in red team exercises and threat simulations to identify gaps, improve competencies, and expand the team’s knowledge.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Candidate Profile</h3> <p style="margin:0 0 12px; ************;">Candidates for this role should possess 2-5 years of experience in a relevant IT security field. The position is suited for systems and software engineers who are adept at solving complex security challenges from first principles and are prepared to contribute to innovative security projects.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Working at Almosafer</h3> <p style="margin:0 0 12px; ************;">At Almosafer, teams operate with purpose, clarity, and a shared commitment to doing things the right way. The company values accountability, trust, and collaboration, creating a structure that supports meaningful contributions from day one. Employees can expect a purpose-led workplace where ideas can create impact, opportunities for ongoing learning and development, recognition for achievements, and a community built on trust, curiosity, and shared momentum.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Application Information</h3> <p style="margin:0 0 12px; ************;">This full-time position is based in Riyadh. Almosafer welcomes applications from qualified candidates who are ready to contribute to shaping the future of security within the travel industry.</p>

<h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">About Nozom</h3> <p style="margin:0 0 12px; ************;">Nozom is seeking a <strong style="font-weight:700;">Penetration Tester</strong> to join its team in Riyadh, Saudi Arabia. This is a full-time position focused on enhancing the security posture of various systems and platforms through comprehensive testing and analysis.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Role Overview</h3> <p style="margin:0 0 12px; ************;">The successful candidate will function as an Information Security Specialist with hands-on experience in penetration testing. This role involves assessing networks, applications, endpoints, wireless environments, and cloud platforms to identify security vulnerabilities and provide effective remediation recommendations.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Key Responsibilities</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Conduct penetration testing for internal networks, web applications, endpoints, wireless networks, and cloud environments.</li> <li style="margin:0 0 6px;">Identify, exploit, validate, and document security vulnerabilities across various systems.</li> <li style="margin:0 0 6px;">Perform secure code reviews to identify authentication flaws, hardcoded credentials, and insecure logic.</li> <li style="margin:0 0 6px;">Participate in advanced Red Team exercises and multi-stage attack simulations.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Technical Expertise</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Assess cloud platforms, including AWS, Azure, GCP, and Oracle, for potential security weaknesses.</li> <li style="margin:0 0 6px;">Apply hands-on experience in penetration testing methodologies and tools.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Qualifications and Experience</h3> <p style="margin:0 0 12px; ************;">Candidates should possess <strong style="font-weight:700;">2-5 years of experience</strong> in information security, specifically with a focus on penetration testing. A strong understanding of security principles and practical application of testing techniques is essential for this role.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Reporting and Communication</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Prepare detailed technical and executive reports outlining findings and recommendations.</li> <li style="margin:0 0 6px;">Present findings to stakeholders and provide support for remediation validation processes.</li> </ul>

<p>The Professional Services Consultant works with clients and partners remotely and/or onsite on engagements of medium-to-high complexity. He/she focuses on the implementation aspects of project delivery, such as implementing firewall and other enhanced security products, as well as optimizing and operating these services, along with any related documentation. The position requires a team player with excellent written and verbal communication skills who follows a structured approach to implementing IT security solutions.</p><p>Responsibilities:</p><ul><li>Develops a clear overall understanding of the customer engagement (objectives, project scope, business and technical requirements).</li><li>Participates in architecture design workshops with customers and/or partners and provides input as necessary.</li><li>Develops project related documents with any required technical architecture diagrams. These documents might include: High-Level Design, Low-Level Design, Migration Plan, Test Plan, Methods of Procedures, Network Implementation Plan, As-Built guide, etc</li><li>Participates in scoping meetings and provides input related to the development of statements of work based on accurate analysis of customers' requirements.</li><li>Ensures that project documents are accurate, complete, current and stored appropriately.</li><li>Performs deployment, configuration, testing and troubleshooting of Fortinet security solutions in the customer environment.</li><li>Assists customers through the rollout, migration or go-live phase for the deployed security solution.</li><li>Performs knowledge transfer sessions for customer s staff on the relevant Fortinet security solutions.</li><li>Resolves and/or escalates issues in a timely fashion.</li><li>Minimizes Fortinet s exposure and risk on projects.</li><li>Completes and submits internal required administrative tasks (timesheets, activities report, project reports, etc ).</li><li>Continuously works on developing knowledge and skills to remain proficient with the relevant Fortinet technologies, products and services by using self-study materials or by attending trainings (as required).</li></ul><p><strong>Desired Candidate Profile</strong></p><ul><li>6+ years experience in LAN/WAN/Internet consulting, support and/or administration.</li><li>3+ years experience with Network Security Products.</li><li>Experience working as a Professional Services senior consultant or engineer is a plus.</li><li>Expertise in NGFW and at least 2 of the following technologies: Email Security, Advanced Thread Protection, Endpoint Security, Application Security, Web Application Firewall, Network Security Management, SIEM, Network Virtualization, Software Defined Networks (SDN) and/or other cloud-based security technologies.</li><li>Very good presentation and technical documentation skills.</li><li>Good troubleshooting skills with a structured approach to problem solving.</li><li>Proven ability to work independently and in a team-oriented, collaborative environment.</li><li>Ability to elicit cooperation from a wide variety of sources, including senior management, clients, and other departments.</li><li>Ability to adapt seamlessly to shifting priorities, demands and timelines.</li><li>Flexible working hours.</li><li>Positive customer service attitude with very good soft skills.</li><li>Ability to bring projects to successful completion through political sensitivity.</li><li>Strong commitment and self-driven individual.</li><li>Education: Bachelor's Degree in technical or management discipline and/or equivalent extensive work-related experience.</li></ul>

<p><strong>Job Title:</strong> Business Development Manager (BDM)<br><strong>Location:</strong> Riyadh, KSA<br><strong>Experience:</strong> 5+ Years<br><strong>Industry:</strong> ELV / Security Systems / Building Technology Solutions</p><br><p><strong>Job Summary</strong></p><br><p>We are seeking a dynamic and results-driven <strong>Business Development Manager</strong> with a strong background in <strong>ELV (Extra Low Voltage) and Security Systems</strong>. The ideal candidate will be responsible for identifying new business opportunities, developing client relationships, driving sales growth, and expanding the company's presence in the security and ELV solutions market.</p><br><p><strong>Key Responsibilities</strong></p><br><ul><li><p>Identify and develop new business opportunities for ELV and Security System solutions.</p></li><li><p>Generate leads and build a strong sales pipeline through strategic networking and market intelligence.</p></li><li><p>Promote and sell solutions including:</p><ul><li><p>CCTV Surveillance Systems</p></li><li><p>Access Control Systems</p></li><li><p>Video Management Systems (VMS)</p></li><li><p>Intrusion Alarm Systems</p></li><li><p>Time Attendance Systems</p></li><li><p>Gate Barrier Systems</p></li><li><p>Intercom & Video Door Phone Systems</p></li><li><p>Other ELV solutions</p></li></ul></li><li><p>Build and maintain strong relationships with consultants, contractors, system integrators, developers, and end clients.</p></li><li><p>Conduct client meetings, site visits, presentations, and solution demonstrations.</p></li><li><p>Prepare proposals, quotations, tender submissions, and commercial negotiations.</p></li><li><p>Coordinate with technical and project teams to ensure successful project execution.</p></li><li><p>Monitor market trends, competitor activities, and customer requirements.</p></li><li><p>Achieve monthly, quarterly, and annual sales targets.</p></li></ul><br><p><strong>Required Qualifications</strong></p><br><ul><li><p>Bachelor's Degree in Engineering, Business Administration, Electronics, or a related field.</p></li><li><p><strong>Must have a strong background in ELV and Security Systems (CCTV, Access Control, Intrusion Alarm, etc.).</strong></p></li><li><p>Proven experience in business development, sales, or account management within the ELV/Security industry.</p></li><li><p>Strong understanding of security technologies, solutions, and industry standards.</p></li><li><p>Experience handling tenders, project sales, and key accounts.</p></li><li><p>Excellent communication, negotiation, and presentation skills.</p></li><li><p>Ability to build and maintain long-term client relationships.</p></li></ul><br><p><strong>Desired Candidate Profile</strong></p><br><ul><li><p>Existing network within the ELV, security, construction, or facilities management sectors.</p></li><li><p>Strong commercial acumen and solution-selling approach.</p></li><li><p>Ability to work independently and achieve sales targets.</p></li><li><p>Proficiency in CRM tools and Microsoft Office applications.</p></li></ul>

Job Description <div> <p>We are seeking a detail-oriented and analytical Assistant of Loss Prevention to join our team in Riyadh, Saudi Arabia. In this role, you will play a vital part in protecting our organization's assets and maintaining a secure environment. You will work collaboratively with the Loss Prevention department to identify risks, investigate incidents, and implement preventive measures. This position requires a professional approach to security matters and a commitment to maintaining the highest standards of integrity and confidentiality.</p> <ul> <li>Monitor surveillance systems and conduct regular facility inspections to identify potential security risks and vulnerabilities</li> <li>Investigate suspected incidents of theft, fraud, or policy violations and document findings in detailed reports</li> <li>Analyze patterns and trends in loss data to recommend preventive strategies and improvements</li> <li>Assist in the development and implementation of loss prevention procedures and security protocols</li> <li>Conduct interviews with staff and customers as part of incident investigations while maintaining professionalism and discretion</li> <li>Maintain organized records of all incidents, investigations, and corrective actions taken</li> <li>Collaborate with store management and other departments to address security concerns and resolve issues</li> <li>Provide training and guidance to staff on loss prevention best practices and security awareness</li> <li>Monitor inventory discrepancies and assist in reconciliation processes</li> <li>Prepare comprehensive reports and presentations for management review</li> <li>Stay current with loss prevention techniques, security technologies, and industry best practices</li></ul></div><p><strong>Desired Candidate Profile</strong></p>Qualifications <div> <ul> <li>Proven experience in loss prevention, asset protection, or retail security environments</li> <li>Strong analytical and investigative skills with the ability to identify patterns and anomalies</li> <li>Proficiency with surveillance and monitoring systems, including CCTV equipment</li> <li>Excellent attention to detail and observational abilities</li> <li>Exceptional written and verbal communication skills in English</li> <li>Demonstrated ability to organize and maintain detailed documentation and records</li> <li>Knowledge of security protocols, procedures, and compliance requirements</li> <li>Problem-solving mindset with the ability to develop practical solutions</li> <li>Strong integrity and trustworthiness with the ability to handle sensitive information confidentially</li> <li>Ability to work independently and as part of a team in a fast-paced environment</li> <li>Physical capability to conduct facility inspections and monitoring activities</li> <li>Preferred experience with inventory management systems and processes</li> <li>Preferred knowledge of retail operations and customer service environments</li> <li>Preferred ability to train and mentor other team members on security procedures</li></ul></div>

<p><br></p><p><b>The opportunity</b></p><p>We are looking for an experienced Manager with a strong consulting background and hands-on expertise in AI Governance, AI Risk Management, Responsible AI, AI Security, and Regulatory Compliance. This is an exceptional opportunity to work with executive leadership teams within major financial institutions and help shape the governance and security foundations of enterprise AI and Generative AI adoption.</p><p>The role requires a blend of governance, security, privacy, risk management, regulatory compliance, and stakeholder management capabilities. Applicants should be comfortable leading client engagements, managing teams, conducting assessments, and developing strategic governance frameworks.</p><p>Your key responsibilities</p><p>AI Governance &amp; Operating Model</p><p>Lead AI Governance assessments and maturity evaluations across enterprise AI and GenAI environments.</p><p>Design and implement AI Governance Frameworks, Operating Models, Policies, Standards, Procedures, and Guidelines.</p><p>Develop enterprise AI Governance strategies aligned with organizational objectives and regulatory requirements.</p><p>Establish AI Governance Committees, RACI models, and decision-making structures.</p><p>Create AI lifecycle governance processes covering ideation, development, validation, deployment, monitoring, and retirement.</p><p>AI Risk Management</p><p>Develop AI Risk Management Frameworks and methodologies.</p><p>Establish AI risk taxonomies, risk assessment methodologies, and AI control frameworks.</p><p>Conduct AI and GenAI risk assessments covering security, privacy, regulatory, operational, model, and third-party risks.</p><p>Develop AI risk registers, heatmaps, risk scoring frameworks, and remediation roadmaps.</p><p>Facilitate risk workshops and stakeholder interviews across business and technology teams</p><p>AI Security &amp; Threat Modeling</p><p>Perform AI security assessments for Generative AI, LLM, RAG, Agentic AI, and Cognitive Search solutions.</p><p>Conduct AI threat modeling exercises leveraging OWASP LLM Top 10, MITRE ATLAS, STRIDE, and other industry practices.</p><p>Assess AI-specific threats including prompt injection, indirect prompt injection, data leakage, model abuse, hallucinations, retrieval poisoning, and excessive agency.</p><p>Evaluate effectiveness of AI guardrails, content filtering, RBAC, DLP, monitoring, logging, and security controls.</p><p>Develop AI Security Blueprints and AI Security Control Frameworks.</p><p>AI and Cyber Regulatory Compliance</p><p>NIST AI RMF</p><p>ISO/IEC 42001</p><p>ISO 27001</p><p>NIST Cybersecurity Framework</p><p>GDPR</p><p>EU AI Act</p><p>PDPL</p><p>SAMA-related requirements</p><p>Regional AI governance requirements</p><p>Client Delivery and Leadership</p><p>Lead multiple consulting engagements and ensure timely delivery of high-quality outputs.</p><p>Develop executive-level reports, presentations, and board-ready materials.</p><p>Facilitate workshops with senior business, technology, risk, legal, compliance, privacy, and security stakeholders.</p><p>Manage engagement teams and mentor consultants and senior consultants.</p><p>Support business development activities including proposals, RFP responses, solutioning, and client presentations</p><p>Skills and attributes for success</p><p>Strong understanding of AI Governance, Responsible AI, AI Risk Management, and AI lifecycle governance.</p><p>Experience developing AI Governance frameworks, policies, standards, procedures, and operating models.</p><p>Strong understanding of AI use case inventory, AI risk classification, AI control frameworks, and AI oversight models.</p><p>Understanding of AI Security concepts including but not limited to: Prompt Injection, Indirect Prompt Injection, Data Leakage, Retrieval Poisoning, Model Abuse, Hallucination Risk, AI Supply Chain Risk, Agentic AI Risks</p><p>Experience performing security risk assessments, threat modeling, and control effectiveness reviews</p><p>Strong understanding of regulatory compliance and governance programs</p><p>Experience working within highly regulated sectors, particularly financial services and government.</p><p>Ability to communicate effectively with executive stakeholders and board-level audiences.</p><p>Strong consulting mindset with excellent presentation and stakeholder management skills.</p><p>Excellent written, verbal, and presentation skills.</p><p>To qualify for the role, you must have</p><p>A bachelor's or master s degree in information technology, cyber security, computer science, data science etc.</p><p>Excellent communication skills with a consulting mindset.</p><p>7-12 years of experience in cybersecurity, technology risk, IT risk, compliance, governance, resilience, or consulting services. Along with this 3-4 years of experience in AI Governance, AI Risk Management, AI Theat Modelling, etc.</p><p>Experience leading client-facing engagements and managing teams.</p><p>Excellent communication, workshop facilitation, and report-writing skills.</p><p>Experience interacting with senior leadership and executive stakeholders.</p><p>Ideally, you ll also have</p><p>ISO/IEC 42001 Lead Implementer or Lead Auditor</p><p>Industry-recognized certifications such as CISSP, CRISC, CISM ISO 27001 LA/LI</p><p>Experience working with AI Tools</p><p>Familiarity with cloud security, privacy, operational resilience, or third-party risk management programs</p><p>Experience supporting clients in highly regulated sectors such as financial services or government</p><p>Knowledge of regional frameworks and regulations within the Middle East</p><p><br></p><p><strong>Desired Candidate Profile</strong></p><p>A bachelor's or master s degree in information technology, cyber security, computer science, data science etc.</p><p>Excellent communication skills with a consulting mindset.</p><p>7-12 years of experience in cybersecurity, technology risk, IT risk, compliance, governance, resilience, or consulting services. Along with this 3-4 years of experience in AI Governance, AI Risk Management, AI Theat Modelling, etc.</p><p>Experience leading client-facing engagements and managing teams.</p><p>Excellent communication, workshop facilitation, and report-writing skills.</p><p>Experience interacting with senior leadership and executive stakeholders.</p><p>Ideally, you ll also have</p><p>ISO/IEC 42001 Lead Implementer or Lead Auditor</p><p>Industry-recognized certifications such as CISSP, CRISC, CISM ISO 27001 LA/LI</p><p>Experience working with AI Tools</p><p>Familiarity with cloud security, privacy, operational resilience, or third-party risk management programs</p><p>Experience supporting clients in highly regulated sectors such as financial services or government</p><p>Knowledge of regional frameworks and regulations within the Middle East</p>

<p>As part of our Cyber Technology Consulting team, you will execute advanced penetration testing, red team engagements, and adversary simulation exercises for enterprise and government clients. You will be responsible for identifying vulnerabilities, exploiting them in controlled scenarios, and providing actionable recommendations to improve clients security posture. The client base spans various sectors and includes collaboration with other teams within Advisory services. This role requires a balance of strong technical expertise, client communication, and mentoring junior team members.</p><p>We re looking for a senior consultant with hands-on expertise and experience in driving offensive security engagements to join our Cyber Technology Consulting team. This is a fantastic opportunity to be part of a leading firm</p><p>Conduct penetration testing across web, mobile, APIs, cloud, and network environments (internal and external). Execute red team and purple team operations, including social engineering, OSINT, and physical security assessments. Perform secure code reviews, wireless security assessments, and application security consulting when required. Develop and execute adversarial attack simulations, leveraging C2 frameworks (commercial: Cobalt Strike, Brute Ratel, NightHawk; open source: Havoc, Mythic, Sliver, Merlin). Stay updated with emerging cyber threats, vulnerabilities, and offensive security techniques, and incorporate these insights into client engagements. Develop detailed reports, articulate technical findings, and deliver actionable recommendations to both technical teams and executive stakeholders. Support pre-sales activities such as scoping, proposal writing, and client workshops.</p><p>Collaborating with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments and other documents/templates. Ability to interpret complex technical results and present insights to business stakeholders. Strong analytical, problem-solving, and critical-thinking skills. Excellent communication and collaboration skills. Deep technical understanding of offensive security methodologies, including network penetration testing, web application testing, and adversary simulation.</p><p>Bachelor s degree in computer science, Cybersecurity, or related field. 4 6 years of hands-on experience in penetration testing, red teaming, or exploit development. Demonstrable proficiency in at least two of the following methodologies:</p><ul><li>Web, web services, mobile, or thick client penetration testing.</li><li>Internal/external network penetration testing.</li><li>Secure code review &amp; application security consulting.</li><li>Wireless assessments.</li><li>Social engineering and red team assessments.</li></ul><p>Strong technical understanding in at least two of the following domains:</p><ul><li>Common web technologies and frameworks.</li><li>Application architecture.</li><li>Cloud platforms (AWS, Azure, GCP).</li><li>Networking and network protocols.</li><li>DevOps pipelines and CI/CD security.</li></ul><p>Hands-on expertise with offensive tools and frameworks (e.g., Burp Suite, Metasploit, BloodHound, Cobalt Strike, Sliver, Havoc). Strong knowledge of MITRE ATT&amp;CK, OWASP Top 10, NIST SP 800-115, and red team methodologies. A valid passport for travel. Excellent communication skills with a consulting mindset.</p><p>Relevant Cyber and offensive security certifications</p><p>Relevant certifications such as OSCP, OSCE, OSWE, OSEP, OSEE, GXPN, CRTO, SANS GWAPT, GPEN.</p><p>Strong understanding of security frameworks and methodologies (e.g., MITRE ATT&amp;CK, OWASP, NIST). Experience in offensive security engagements</p><p>We offer a competitive compensation package where you ll be rewarded based on performance and recognized for the value you bring to our business. Plus, we offer:</p><ul><li>Continuous learning: You ll develop the mindset and skills to navigate whatever comes next.</li><li>Success as defined by you: We ll provide the tools and flexibility, so you can make a meaningful impact, your way.</li><li>Transformative leadership: We ll give you the insights, coaching and confidence to be the leader the world needs.</li><li>Diverse and inclusive culture: You ll be embraced for who you are and empowered to use your voice to help others find theirs.</li></ul><p>If you can demonstrate that you meet the criteria above, please contact us as soon as possible. The exceptional EY experience. It s yours to build. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform, and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.</p><p><strong>Desired Candidate Profile</strong></p><p>Bachelor s degree in computer science, Cybersecurity, or related field. 4 6 years of hands-on experience in penetration testing, red teaming, or exploit development. Demonstrable proficiency in at least two of the following methodologies:</p><ul><li>Web, web services, mobile, or thick client penetration testing.</li><li>Internal/external network penetration testing.</li><li>Secure code review &amp; application security consulting.</li><li>Wireless assessments.</li><li>Social engineering and red team assessments.</li></ul><p>Strong technical understanding in at least two of the following domains:</p><ul><li>Common web technologies and frameworks.</li><li>Application architecture.</li><li>Cloud platforms (AWS, Azure, GCP).</li><li>Networking and network protocols.</li><li>DevOps pipelines and CI/CD security.</li></ul><p>Hands-on expertise with offensive tools and frameworks (e.g., Burp Suite, Metasploit, BloodHound, Cobalt Strike, Sliver, Havoc). Strong knowledge of MITRE ATT&amp;CK, OWASP Top 10, NIST SP 800-115, and red team methodologies. A valid passport for travel. Excellent communication skills with a consulting mindset.</p><p>Relevant Cyber and offensive security certifications</p><p>Relevant certifications such as OSCP, OSCE, OSWE, OSEP, OSEE, GXPN, CRTO, SANS GWAPT, GPEN.</p><p>Strong understanding of security frameworks and methodologies (e.g., MITRE ATT&amp;CK, OWASP, NIST). Experience in offensive security engagements</p>

<p>This is not your typical IR or analyst role, we spend large percentages of our time on project work, balancing this with our operational duties such as detection engineering and incident response. If you're ready to make a tangible impact and drive innovative security projects, apply now to join our global team and help shape the future of security at Almosafer.We are looking for systems &amp; software engineers who love to solve complex security problems fundamentally from first principles.</p><p><strong>Desired Candidate Profile</strong></p><ul><li>Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field</li><li>3+ years of experience in the field of incident response, detection engineering or related security disciplines</li><li>Strong programming skills in Python, Rust, and/or Go.</li><li>Practical experience with BeyondCorp or Zero Trust security models.Proven expertise in one or more detection &amp; response areas:</li><li>Digital forensics (artefacts, disk/cloud acquisition, tools like GRR, Timesketch)</li><li>Malware analysis (static &amp; dynamic, IDA Pro, Ghidra)</li><li>Incident management &amp; response (large-scale, multi-stakeholder events</li><li>Host/network intrusion detection (parsing large, unfamiliar logs/systems)</li><li>Network telemetry (flows, PCAPs, Zeek)</li><li>Threat intelligence (modelling actors and TTPs)</li><li>Threat hunting (finding IOCs across data lakes)</li><li>OS internals across two or more of macOS, Windows, or Linux covering file/disk structures, forensics, security controls, hardening, scripting, and binary analysis.</li><li>Advanced cloud knowledge able to build, deploy, and investigate security events across two or more of AWS, Kubernetes, or GCP.</li></ul>

<h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">About Exequt MENA</h3> <p style="margin:0 0 12px; ************;">Exequt MENA is a rapidly expanding consulting and technology services firm based in Riyadh, Saudi Arabia. The company specializes in cybersecurity, Identity and Access Management (IAM), cloud solutions, AI-driven platforms, and custom software engineering. Exequt partners with organizations across both public and private sectors to deliver significant digital transformation initiatives throughout the Kingdom of Saudi Arabia.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">The Role: Cybersecurity Incident Response Specialist</h3> <p style="margin:0 0 12px; ************;">Exequt MENA is seeking a full-time Cybersecurity Incident Response Specialist with 0-1 years of experience to join its team in Riyadh. This role involves investigating, containing, eradicating, and recovering from security incidents across various client environments, including endpoints, networks, identities, cloud platforms, and applications. The specialist will play a key role in helping clients respond to and learn from real-world cybersecurity threats.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Key Responsibilities</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Investigate and respond to cybersecurity incidents such as ransomware, malware, phishing, account compromise, data theft, and lateral movement.</li> <li style="margin:0 0 6px;">Perform incident triage, investigation, containment, eradication, and recovery procedures.</li> <li style="margin:0 0 6px;">Conduct threat hunting activities and root-cause analysis for security incidents.</li> <li style="margin:0 0 6px;">Execute basic digital forensics and malware analysis tasks.</li> <li style="margin:0 0 6px;">Identify and analyze Indicators of Compromise (IOCs) and Indicators of Attack (IOAs), mapping attacks to the MITRE ATT&amp;CK framework.</li> <li style="margin:0 0 6px;">Investigate security events within Windows, Linux, Active Directory, and cloud environments.</li> <li style="margin:0 0 6px;">Utilize Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR)/Extended Detection and Response (XDR) platforms for security event investigation.</li> <li style="margin:0 0 6px;">Develop and improve incident response playbooks and detection rules.</li> <li style="margin:0 0 6px;">Prepare detailed incident reports, timelines, and remediation recommendations.</li> <li style="margin:0 0 6px;">Support Security Operations Center (SOC)/Computer Security Incident Response Team (CSIRT) operations and critical incident response efforts.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Required Qualifications</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">0-1 years of experience in Incident Response (IR), Digital Forensics and Incident Response (DFIR), Security Operations Center (SOC), or Threat Hunting.</li> <li style="margin:0 0 6px;">Hands-on experience with security platforms such as Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender, or Cortex XDR.</li> <li style="margin:0 0 6px;">Strong knowledge of Windows/Linux operating systems and networking principles.</li> <li style="margin:0 0 6px;">Proficiency in scripting languages such as PowerShell, Python, or Bash.</li> <li style="margin:0 0 6px;">Strong understanding of the MITRE ATT&amp;CK framework and common attack techniques.</li> <li style="margin:0 0 6px;">Saudi Nationality is required for this position.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Preferred Skills and Attributes</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Experience investigating specific types of incidents, including ransomware, phishing, credential theft, and endpoint compromise.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Compensation and Benefits</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Performance-based compensation structure.</li> <li style="margin:0 0 6px;">Bupa medical insurance (Golden Tier).</li> <li style="margin:0 0 6px;">Ongoing training and mentorship from experienced leadership.</li> <li style="margin:0 0 6px;">Exposure to high-impact projects with leading clients in Saudi Arabia.</li> <li style="margin:0 0 6px;">A collaborative, growth-oriented company culture.</li> </ul>

<h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">About Cerebra and the Presales Engineer Role</h3> <p style="margin:0 0 12px; ************;">Cerebra is seeking a highly skilled <strong style="font-weight:700;">Presales Engineer</strong> to join our team in Riyadh, Saudi Arabia. This full-time position requires a strong background in network security and cybersecurity, with 2-5 years of hands-on experience in network security vendor solutions. The role focuses on presenting, demonstrating, and proposing Cerebra's cybersecurity solutions to clients.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Role Purpose</h3> <p style="margin:0 0 12px; ************;">The Presales Engineer is responsible for ensuring that technical proposals effectively address customer needs and business objectives. This involves engaging directly with clients to understand their technical requirements, business challenges, and security objectives, and then aligning Cerebra's solutions to meet those specific demands and compliance requirements.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Key Responsibilities</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Engage with customers to understand their technical requirements, business challenges, and security objectives.</li> <li style="margin:0 0 6px;">Design and propose Cerebra's cybersecurity solutions, aligning them with customer environments and compliance requirements.</li> <li style="margin:0 0 6px;">Deliver technical presentations, product demonstrations, and workshops showcasing solution capabilities and business impact.</li> <li style="margin:0 0 6px;">Support the sales team in developing proposals, solution architectures, and responding to RFPs/RFIs.</li> <li style="margin:0 0 6px;">Conduct Proof of Concepts (POCs) to validate solution fit and performance in customer environments.</li> <li style="margin:0 0 6px;">Act as a trusted technical advisor, leveraging prior network security vendor experience to build customer confidence.</li> <li style="margin:0 0 6px;">Maintain a deep understanding of network security trends, attack vectors, compliance requirements (GRC), and the competitor landscape.</li> <li style="margin:0 0 6px;">Provide feedback to product and engineering teams to enhance solutions based on customer insights.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Required Qualifications and Experience</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">2-5 years of experience as a Presales Engineer or in a similar technical client-facing role.</li> <li style="margin:0 0 6px;">Strong background in network security and cybersecurity.</li> <li style="margin:0 0 6px;">Hands-on experience with network security vendors’ solutions.</li> <li style="margin:0 0 6px;">Demonstrated ability to understand complex technical requirements and translate them into effective solutions.</li> <li style="margin:0 0 6px;">Proficiency in delivering technical presentations and product demonstrations.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Work Environment and Travel</h3> <p style="margin:0 0 12px; ************;">This is a full-time position based in Riyadh, Saudi Arabia. The role requires a willingness to travel locally and regionally for customer meetings, demonstrations, and industry events as needed.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Application Information</h3> <p style="margin:0 0 12px; ************;">Candidates who meet the outlined qualifications and experience are encouraged to apply.</p>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Strong ability to manage and operate SAP platforms. Strong knowledge of SAP BASIS operations. Ability to manage system stability, performance monitoring, and incident resolution. Strong knowledge of SAP security and access management. Ability to design and manage SAP roles and authorizations. Knowledge of SAP GRC Access Control and access risk management. Ability to support audit and compliance requirements. Ability to manage system patching, transports, refreshes, and upgrades. Ability to coordinate with HEC and manage SLA requirements. Knowledge of security and integration for related systems such as SuccessFactors, CPI, BTP, and Fiori. 7 to 9 years of experience in SAP BASIS and SAP Security. Experience managing SAP S/4HANA Private Cloud hosted on HEC or similar cloud platforms. Hands-on experience with SAP GRC Access Control. Experience in audit compliance support. Strong knowledge of SAP BASIS administration, transport management, and system monitoring. Strong knowledge of SAP security, role design, SoD concepts, and access governance.</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul><li>Strong ability to manage and operate SAP platforms.</li><li>Strong knowledge of SAP BASIS operations.</li><li>Ability to manage system stability, performance monitoring, and incident resolution.</li><li>Strong knowledge of SAP security and access management.</li><li>Ability to design and manage SAP roles and authorizations.</li><li>Knowledge of SAP GRC Access Control and access risk management.</li><li>Ability to support audit and compliance requirements.</li><li>Ability to manage system patching, transports, refreshes, and upgrades.</li><li>Ability to coordinate with HEC and manage SLA requirements.</li><li>Knowledge of security and integration for related systems such as SuccessFactors, CPI, BTP, and Fiori.</li><li>7 to 9 years of experience in SAP BASIS and SAP Security.</li><li>Experience managing SAP S/4HANA Private Cloud hosted on HEC or similar cloud platforms.</li><li>Hands-on experience with SAP GRC Access Control.</li><li>Experience in audit compliance support.</li><li>Strong knowledge of SAP BASIS administration, transport management, and system monitoring.</li><li>Strong knowledge of SAP security, role design, SoD concepts, and access governance.</li></ul><p></p></section>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>The IT Infrastructure &amp; Operations Admin is responsible for leading the strategy, delivery, and day-to-day operations of the organization s IT infrastructure and service operations across on-premises, cloud, and hybrid environments. The role ensures that infrastructure services, systems, enterprise and cloud networks, cloud platforms, and end-user support services are secure, reliable, scalable, compliant, and aligned with business objectives. The role is also accountable for infrastructure availability, IT service continuity, cloud governance, infrastructure security and compliance, disaster recovery readiness, vendor coordination, budget management, and the development of the technical operations team. Key Responsibilities Manage the IT helpdesk and technical support function to ensure the timely resolution of incidents, service requests, operational issues, and escalations. Manage Active Directory and Identity and Access Management operations, including user provisioning, access reviews, group policies, role-based access control, and privileged access coordination. Oversee the design, implementation, administration, and maintenance of infrastructure components, including servers, networks, storage, telecommunications, virtualization platforms, operating systems, system software, and cloud services. Oversee the design, implementation, security, administration, and optimization of enterprise and cloud networking environments, including LAN, WAN, VPN, firewalls, routing, switching, DNS, load balancers, VPC/VNet architecture, network segmentation, and hybrid cloud connectivity. Ensure enterprise and cloud networks provide the required levels of availability, performance, scalability, security, resilience, and connectivity across on-premises, cloud, and hybrid environments. Manage cloud environments, including provisioning, configuration, identity and access management, networking, monitoring, resource governance, security posture, and cost optimization. Lead cloud adoption and migration initiatives, including landing-zone design, workload migration, cloud governance, data residency, network connectivity, and service optimization. Ensure infrastructure availability, performance, reliability, scalability, and service continuity in line with defined business and service-level requirements. Develop, maintain, and regularly test disaster recovery and business continuity plans for critical infrastructure, network, and cloud services. Ensure infrastructure, network, and cloud environments comply with applicable security standards, internal policies, and regulatory requirements, including NCA and PDPL requirements where applicable. Plan, manage, and deliver infrastructure, networking, and cloud projects within the agreed scope, budget, timeline, quality, and security requirements. Coordinate with application, cybersecurity, digital, and business teams to ensure the effective integration of infrastructure and network services with business applications and technology initiatives. Manage technical changes, system upgrades, patching, preventive maintenance, and security updates for infrastructure, network devices, operating systems, and software components. Monitor infrastructure, networks, systems, cloud services, and electronic services to ensure stability, availability, performance, capacity, and effective resource utilization. Handle major incidents and operational issues, coordinate resolution activities, escalate where required, and ensure appropriate follow-up with internal teams and external vendors. Prepare periodic and on-demand reports covering infrastructure status, network availability, service performance, incidents, risks, projects, capacity, and improvement initiatives. Stay current with emerging infrastructure, networking, cloud, and operations technologies, and recommend their adoption where they provide operational, security, or business value. Communicate effectively with management, vendors, technical teams, and relevant stakeholders regarding infrastructure operations, risks, changes, projects, and service performance. Develop and implement the organization s long-term infrastructure and operations strategy, roadmap, architecture, and technical standards across on-premises, cloud, and hybrid environments.</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><p>Bachelor s degree in information technology, Computer Science, Computer Engineering, Network Engineering, or a related field. Minimum of 3 to 5 years of relevant experience in IT infrastructure, system administration, networking, cloud operations, or IT service operations, including experience in a supervisory or management role. Proven experience managing infrastructure operations, enterprise and cloud networking, technical support, cloud platforms, vendors, and service continuity. Experience working in a regulated environment is preferred. Saudi National. Strong knowledge of IT infrastructure technologies, including servers, enterprise networks, storage, telecommunications, virtualization, operating systems, and end-user computing. Hands-on experience in system administration across Windows and/or Linux environments. Strong knowledge of enterprise networking concepts and technologies, including TCP/IP, routing, switching, LAN/WAN, VPN, firewalls, DNS, DHCP, network segmentation, load balancing, wireless networking, and network monitoring. Strong knowledge of cloud networking, including VPC/VNet architecture, subnets, route tables, security groups, network security groups, cloud firewalls, load balancers, private endpoints, VPN gateways, direct connectivity, and hybrid cloud integration. Strong knowledge of cloud platforms such as Microsoft Azure, AWS, Google Cloud, or Oracle Cloud, including IAM, networking, monitoring, governance, security, and cost management. Experience in infrastructure planning, cloud adoption, workload migration, and hybrid or multi-cloud operations. Strong understanding of cybersecurity best practices, infrastructure security, cloud security, network security, access management, patch management, backup, disaster recovery, and business continuity. Good knowledge of applicable local regulatory and compliance requirements, including NCA and PDPL requirements where relevant. Excellent problem-solving, analytical thinking, decision-making, and troubleshooting skills. Strong communication and interpersonal skills, with a good command of Arabic and English.</p><p></p></section>

<p>The Senior Manager, VCP &amp; Screening Operations leads QIC s specialist screening and enhanced-security capability across vehicle access control points, pedestrian screening locations, event venues (applicable to public realm), asset openings and heightened security operations. The role is accountable for the design input, readiness, mobilisation, performance and assurance of vehicle scanning, baggage X-ray, walk-through and hand-held metal detection, personal search, vehicle inspection, restricted-item control and secondary-screening arrangements. The role holder ensures that scanning and screening operations are risk-based, regulatorily compliant, operationally efficient and aligned with QIC s guest experience, workforce access and city security objectives.</p><p>Responsabilities</p><ul><li>Lead the strategic development, operational planning, rollout and assurance of QIC s scanning and screening capability across fixed VACPs, mobile scanning assets, pedestrian screening locations, event venues and elevated threat level security deployments.</li><li>Provide technical and operational leadership for vehicle X-ray scanning, mobile scanning, vehicle inspection, secondary search and VACP operations, including equipment capability, throughput, staffing model and operational constraints.</li><li>Plan and oversee walk-through metal detection, hand-held metal detection, baggage X-ray, bag search, personal search and secondary-screening arrangements across permanent, temporary and event-based deployments.</li><li>Own the governance, management and execution of restricted-item controls across permanent and temporary screening operations.</li><li>Develop and implement risk-based screening uplift strategies that support major events, VIP/VVIP activity, asset activations and heightened threat conditions, ensuring security capabilities are scalable, proportionate and operationally effective.</li><li>Plan and coordinate cross-functional readiness across assets, city leadership, operational stakeholders and delivery partners to ensure infrastructure, workforce, technology and support requirements are ready to activate scanning and screening operations at scale across a complex geographical landscape.</li><li>Coordinate specialist security support requirements, including K9 capabilities, government interfaces and technology teams to ensure effective operational readiness and delivery.</li><li>Ensure incidents, exercises, audits and live deployments drive SOP updates and future planning improvements.</li><li>Manage the scanning asset lifecycle, using operational and maintenance data to inform replacement planning, preventative maintenance programmes, fleet health and operational readiness.</li><li>Maintain operator authorisations, specialist training, refresher requirements and equipment competence records.</li><li>Provide operational input into procurement, design changes and future scanning technology requirements.</li><li>Manage contractor performance against KPIs, SLAs, manpower plans, technical obligations and readiness requirements.</li><li>Raise, track and close NCRs, corrective actions and repeated performance failures.</li><li>Lead site inspections, readiness checks, audits and operational reviews to verify deployment readiness, contractor performance and compliance with approved operating requirements.</li><li>Identify operational, commercial and capability gaps, agree corrective actions with contractors, vendors and internal stakeholders, and support the Director in scaling the capability through commercially viable delivery models.</li><li>Work with City Ops Verticals, Event Operators, Asset Owners/Operators and Delivery / Development (construction coordination).</li><li>Align scanning operations with workforce access, vehicle access, guest flows and asset operating requirements.</li><li>Provide expert advice on scanning design, operational constraints, guest impact and threat-based deployment requirements.</li><li>Produce readiness, performance, incident, restricted-item and improvement reports.</li></ul><p><strong>Desired Candidate Profile</strong></p><p>Bachelor's degree or equivalent recognized qualification in Security Management, Security and Risk Management, Aviation Security, Emergency Management Operations Management or a related discipline. Extensive experience planning and leading vehicle and individual screening operations in complex, high-volume, geographically dispersed or high-risk environments. Practical leadership experience with vehicle X-ray scanning, mobile scanning, vehicle inspection, secondary search, fixed VACP operations and restricted-item controls. Experience planning and managing walk-through metal detection, hand-held metal detection, baggage X-ray, bag search, personal search and secondary screening across permanent and temporary deployments. Experience in airports, border security, critical infrastructure, large public venues, giga-projects, government facilities or national-security operating environments. Strong experience managing specialist security contractors, KPI and SLA performance, NCRs, corrective actions, audits, operational readiness and value-for-money challenge. Proven ability to lead live operations during high-attendance periods, major events, VIP/VVIP activity and elevated threat conditions. Demonstrated ability to operate within a complex stakeholder environment, balancing competing priorities and expectations to achieve strategic and operational outcomes.</p>