وظائف مهندسى امن معلومات - جدة السعودية

Who we are:Albawani is one of the leading construction and contracting companies in Saudi Arabia. Established in 1991, the company has grown from a small civil works contractor into a major diversified group with operations across construction, infrastructure, engineering, water and power, and industrial services. Headquartered in Riyadh, Albawani is recognized for delivering large-scale commercial, healthcare, educational, and government projects throughout the Kingdom. Albawani is known for its strong commitment to quality, safety, and innovation, holding several international ISO certifications and a Class-1 contractor ranking in Saudi Arabia. Job Title:Network Engineer Department:Technology, Infrastructure & IT Operations Role Purpose:The Network Engineer is responsible for designing, implementing, managing, and securing the organization’s network infrastructure across multiple sites and projects within the Kingdom of Saudi Arabia. This role ensures high availability, scalability, and secure connectivity for corporate offices, remote sites, and JV environments. The Network Engineer works closely with IT operations, cybersecurity teams, and external vendors to maintain optimal network performance and compliance with national cybersecurity frameworks. Key Duties & Responsibilities:Design, deploy, and manage LAN/WAN, MPLS, VPN, and wireless networks across multiple sites. Implement network segmentation, QoS policies, and redundancy mechanisms (e.g., HSRP, VRRP). Perform performance monitoring, tuning, and capacity planning. Maintain and update network documentation (topology diagrams, IP schemas, configuration records). Implement and maintain network security measures (firewalls, IPS, ACLs). Collaborate with the cybersecurity team to ensure compliance with NCA, ISO 27001, and NIST standards. Conduct root cause analysis for network issues to ensure minimal downtime. Coordinate with ISPs and vendors for installation, upgrades, and resolution of network problems. Work with external vendors and system integrators to support network infrastructure enhancements. Manage hardware/software upgrades, ensuring compatibility and minimal disruption. Assist in planning, testing, and execution of disaster recovery strategies from a network perspective. Support hybrid connectivity solutions for Azure and AWS. Research and recommend emerging network technologies. Identify opportunities for cost optimization and performance enhancements. Job Requirements:Minimum 5–7 years’ experience in network engineering within medium to large-scale enterprise environments. Hands-on experience with LAN, WAN, MPLS, VPN, and wireless technologies. Strong understanding of enterprise network security, firewalls, and compliance with national cybersecurity frameworks (NCA). Experience with network infrastructure in cloud environments (Azure, AWS) is highly desirable. Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or related field. CCNA required; CCNP preferred. Additional certifications (Network+, HCIA) and cybersecurity certifications (e.g., Fortinet NSE, Palo Alto PCNSE) are a plus.

About the Role We are looking for a detail-oriented Network Engineer with hands-on experience in switching technologies to join our IT Infrastructure team. The ideal candidate has practical, day-to-day experience configuring and troubleshooting enterprise LAN switching environments.<br>Key Responsibilities Configure, implement, and maintain LAN switching infrastructure, including VLANs, trunking (802.1Q), STP/RSTP/MSTP, Ether Channel, and inter-VLAN routing. Troubleshoot Layer 2 issues (loops, broadcast storms, connectivity failures) and provide L1/L2 network support. Implement switch-port security (port security, DHCP snooping, dynamic ARP inspection). Maintain network documentation, topology diagrams, and configuration backups. Perform firmware/software upgrades and support network expansion projects alongside senior engineers. Participate in on-call rotation as required.<br>Required Skills CCNA certified, with 3 years of hands-on switching experience. Strong grasp of VLANs, trunking, STP/RSTP, Ether Channel/LACP, and Layer 2/3 concepts. Hands-on experience with Cisco Catalyst switches (other vendors a plus). Familiarity with monitoring tools (Solar Winds, PRTG, Wireshark). Basic routing knowledge (OSPF, static routing) is an advantage. Strong troubleshooting, communication, and teamwork skills.

<h3 >About Alandalus Education</h3> <p >Alandalus Education is seeking a dedicated professional to join its IT Department. This full-time position is based in either <strong >Jeddah</strong> or <strong >Makkah</strong>, within the Makkah region, and plays a crucial role in maintaining the security of our digital infrastructure.</p> <h3 >The Role: Cyber Security Administrator</h3> <p >The Cyber Security Administrator is responsible for implementing cybersecurity controls, managing security risks, and protecting the organization's systems and digital infrastructure. This role ensures the confidentiality, integrity, and availability of information, while also maintaining compliance with regulatory requirements and industry best practices. Candidates should have 0-1 years of experience in a relevant field.</p> <h3 >Key Responsibilities</h3> <ul > <li >Implement and monitor company-wide cybersecurity policies and controls.</li> <li >Monitor security systems, analyze potential threats, and respond effectively to security incidents.</li> <li >Conduct security risk assessments and propose comprehensive mitigation plans.</li> <li >Manage user identities and permissions, including regular review of access levels.</li> <li >Implement cybersecurity awareness programs and actively raise security awareness among employees.</li> <li >Monitor compliance with regulatory requirements and relevant security standards.</li> <li >Prepare periodic reports detailing risks, incidents, and compliance levels.</li> </ul> <h3 >Required Qualifications and Experience</h3> <ul > <li >0-1 years of experience in cybersecurity or a related IT field.</li> <li >Good knowledge of the National Cybersecurity Authority (ECC) controls and global best practices.</li> <li >Experience with network protection systems, identity and access management solutions, and general security protection solutions.</li> </ul> <h3 >Preferred Certifications and Background</h3> <ul > <li >CompTIA Security+ certification.</li> <li >Certified Ethical Hacker (CEH) certification.</li> <li >ISO/IEC 27001 Lead Implementer or Lead Auditor certification.</li> <li >ISC2 Certified in Cybersecurity (CC) or CISSP certification for candidates with advanced experience.</li> <li >Experience working in multi-branch organizations or within the education sector.</li> </ul> <h3 >Application Information</h3> <p >This is a full-time position based in Jeddah or Makkah. Salary details will be discussed during the interview process. We encourage qualified candidates to apply.</p>

Job Overview<br>We are seeking an experienced Firewall & Network Security Specialist to support a large enterprise cybersecurity project covering Firewall Assessment, Network Segmentation, Communication Matrix, Firewall Policy Development, and Palo Alto Panorama Migration.<br><br>Key Responsibilities<br>Review and optimize firewall configurations across On-Premises, OT/ICS, and Cloud environments.<br>Audit firewall rules and identify obsolete, duplicate, overly permissive, and unauthorized rules.<br>Assess network segmentation and ACLs and implement least-privilege / default-deny principles.<br>Develop and maintain a comprehensive Communication Matrix covering Source, Destination, Application, Ports, Protocols, Justification, Version, and Approval.<br>Translate approved communication requirements into structured firewall policies.<br>Review and document inbound/outbound traffic flows and authorized services.<br>Perform Palo Alto Panorama Migration, including firewall onboarding, policy/object migration, Device Groups, Templates, validation, testing, cutover, and rollback planning.<br>Integrate firewall logs with SIEM and validate security monitoring.<br>Prepare firewall, segmentation, communication matrix, and Panorama migration documentation.<br>Coordinate with Network, Infrastructure, Application, SOC, Information Security, and Cybersecurity Architecture teams.<br>Present findings and obtain required stakeholder and Cybersecurity Architecture approvals.<br>Ensure compliance with NCA, ISO 27001, NIST, and relevant security standards.<br><br>Requirements<br>7+ years of experience in Network Security / Firewall Engineering.<br>Strong hands-on experience with Palo Alto Firewalls and Panorama.<br>Proven experience in Panorama migration and centralized firewall management.<br>Strong knowledge of Firewall Policies, NAT, ACLs, Network Segmentation, TCP/IP, and Routing.<br>Experience with enterprise On-Prem, Cloud, and preferably OT/ICS environments.<br>Experience with SIEM integration and security monitoring.<br>Strong documentation and stakeholder-management skills.<br>Relevant certifications such as PCNSE, CCNP Security, CISSP, or equivalent are preferred.<br>On-site availability in Saudi Arabia is mandatory.<br>Candidates must comply with all CLIENT IT and Information Security policies and procedures.<br>Key Deliverables<br>Firewall Assessment & Rule Optimization<br>Network Segmentation Assessment<br>Communication Matrix – XLSX/CSV<br>Firewall Policy<br>Palo Alto Panorama Migration Plan & Runbook<br>Migration Validation Report<br>SIEM Integration<br>Security Architecture Review Package<br>Final As-Built Documentation<br>Stakeholder Approval & Sign-off

Job Objective:To lead and develop the comprehensive cybersecurity strategy, govern the protection of digital infrastructure and technical assets, ensure compliance with the National Cybersecurity Authority (NCA) regulations, manage risks and budgets, and build capacities for Al Majed Oud Company.<br>Scope of Responsibilities and Key Duties:<br>1. Leadership, Strategy, and Digital Asset Protection Leads and approves the comprehensive cybersecurity strategy in alignment with the company’s general directives and digital transformation strategy. Defines and adopts cybersecurity requirements and controls for infrastructure, networks, servers, and cloud environments, and monitors their implementation in coordination with the Operations and Infrastructure Department. Approves response plans for cyber incidents, emergencies, and technical crises to ensure business continuity and mitigate risks. Directs the execution of vulnerability assessments and periodic penetration testing for digital infrastructure and applications, and approves remediation plans. Governs and oversees the securing of digital supply chains, technology service provider contracts, and external company systems. Supervises the Security Operations Center (SOC) and monitors 24/7 early warning and threat detection indicators. Approves cybersecurity architecture requirements in coordination with the Enterprise Architecture team.<br>2. Governance, Risk Management, and Cyber Compliance Governs and ensures full compliance with the National Cybersecurity Authority (NCA) controls, such as Essential Cybersecurity Controls (ECC) and Critical Systems Cybersecurity Controls (CSCC). Approves and updates the corporate cyber risk register and endorses treatment strategies and operational/technical risk mitigation plans. Endorses internal security policies, standards, and controls, and oversees their dissemination and implementation across all sectors of the company. Directs and oversees cybersecurity awareness programs and phishing simulation campaigns to elevate employees' security awareness. Coordinates with regulatory bodies, authorities, and independent auditors, and approves periodic compliance and cyber audit reports. Monitors and evaluates personal data protection and commercial transaction confidentiality projects to ensure alignment with approved regulations.<br>3. Budget Management and Financial Control Prepares the annual estimated budget for the Cybersecurity Department, including license costs, security software, and security infrastructure. Oversees the regulation and tracking of operational and capital expenditures (OPEX/CAPEX) for security projects to ensure strict compliance with the approved budget. Evaluates the technical and financial feasibility of targeted security solutions and tools to maximize the return on investment (ROI) in digital asset protection.<br>4. People Management Leads and directs the cybersecurity team and monitors the achievement of operational goals. Sets SMART individual goals and Key Performance Indicators (KPIs) for subordinates, and approves annual performance evaluations and training needs. Directs and ensures the creation of succession plans, development of technical talents, and preparation of second-line cyber leaders. Fosters a culture of compliance and security vigilance, and promotes a motivating work environment that supports outstanding performance and corporate alignment.<br>5. Policies, Operations, and Procedures Monitors the implementation of policies, processes, standard operating procedures (SOPs), identity management controls, and access privileges. Leads developmental initiatives to automate incident response and continuously improve cyber defense and analysis tools.<br><br>Qualifications and Requirements:<br>Experience:8 to 12 years of specialized practical experience in cybersecurity, digital infrastructure protection, and governance, including at least 3 years in a supervisory or leadership role. Previous experience as an ISO 27001 Lead Implementer / Lead Auditor is preferred.<br>Educational Qualifications:Bachelor’s degree in Cybersecurity, Computer Engineering, Computer Science, Information Technology, or an equivalent field.<br>Professional Certifications:Mandatory: CISM or CISSPPreferred: CRISC<br>Skills:High leadership and strategic ability to manage and direct the cybersecurity and digital transformation ecosystem. Superior competence in formulating and approving cyber governance frameworks, policies, and national compliance standards. Exceptional skill in preparing and managing estimated budgets for cybersecurity, and controlling license and project costs. Deep experience in the security architecture of networks, cloud systems, and e-commerce platforms. Mastery of cyber risk management, building risk registers, and treatment strategies. Ability to lead cyber incident response operations, crisis management, and disaster recovery. Comprehensive knowledge of the National Cybersecurity Authority (NCA) regulations and international digital security standards. High-level strategic communication and coordination skills with executive management and regulatory authorities.

<h3 >About the Role</h3> <p >DP World is seeking an <strong >Assistant Manager Information Security &amp; Network</strong> to join their team in Jeddah, Makkah, Saudi Arabia. This full-time position is integral to maintaining a robust and secure digital infrastructure within the organization's operations in the region.</p> <h3 >Role Purpose</h3> <p >The primary purpose of this role is to manage the comprehensive information security and networking functions. This involves ensuring the <strong >confidentiality, integrity, and availability</strong> of all systems, thereby safeguarding critical data and operational continuity across DP World's facilities.</p> <h3 >Key Responsibilities</h3> <p >The Assistant Manager Information Security &amp; Network will undertake a range of critical responsibilities, including:</p> <ul > <li >Developing and enforcing comprehensive network and security policies to protect organizational assets.</li> <li >Monitoring and managing security infrastructure, including firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), and Security Information and Event Management (SIEM) systems.</li> <li >Ensuring strict compliance with relevant security standards such as ISO 27001, National Cyber Security Authority (NCA) regulations, and internal DP World policies.</li> <li >Coordinating and leading the response to security incidents, including investigation, containment, and recovery efforts.</li> <li >Managing vendor contracts and Service Level Agreements (SLAs) related to network and security services.</li> </ul> <h3 >Qualifications and Experience</h3> <p >Candidates for this position should possess a strong background in information security and network management. A minimum of <strong >5 to 10 years of relevant experience</strong> is required, demonstrating a proven track record in managing complex security and network environments and ensuring compliance with industry standards.</p> <h3 >Work Location and Type</h3> <p >This is a <strong >full-time</strong> position based in <strong >Jeddah, Makkah, Saudi Arabia</strong>. The role requires on-site presence to effectively manage critical security and network operations within the local facilities.</p> <h3 >Application Information</h3> <p >Interested candidates who meet the specified requirements are encouraged to apply. Further details regarding the application process will be provided.</p>

We’re Hiring: Cybersecurity Engineer – Web Application Security<br>APTWatch is looking for a Cybersecurity Engineer with a strong focus on Web Application Security to join our growing technical team.<br>The role will focus on identifying, assessing, and mitigating security vulnerabilities across modern web applications, APIs, and supporting infrastructure.<br>Key Responsibilities<br>* Perform web application and API security assessments.* Conduct vulnerability assessments and penetration testing.* Identify and validate vulnerabilities based on OWASP Top 10 and OWASP API Security Top 10.* Review authentication, authorization, session management, and access-control mechanisms.* Test for common vulnerabilities such as XSS, SQL/NoSQL Injection, SSRF, IDOR, CSRF, and insecure file handling.* Perform security reviews of REST APIs and modern web architectures.* Work with developers to reproduce, prioritize, and remediate security findings.* Support secure coding practices and security testing throughout the SDLC.* Prepare clear technical vulnerability reports with evidence, risk assessment, and remediation recommendations.<br>Requirements<br>* Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, or a related field.* Hands-on experience in web application security and penetration testing.* Strong understanding of HTTP/HTTPS, REST APIs, authentication protocols, and web security fundamentals.* Practical experience with tools such as Burp Suite, OWASP ZAP, Nmap, and Postman.* Familiarity with Linux and scripting using Python, Bash, or similar languages.* Understanding of modern application architectures, including frontend/backend applications, APIs, databases, containers, and cloud environments.* Ability to clearly document and communicate technical security findings.<br>Preferred Qualifications<br>* Experience with SAST, DAST, SCA, and Dev Sec Ops practices.* Familiarity with CI/CD security integration and container security.* Certifications such as OSCP, OSWE, e WPT, BSCP, or equivalent are a plus.<br>Location: Riyadh, Saudi Arabia Employment Type: Full-time<br>Interested candidates may submit their CV to:<br>hr@apt-watch.com

Job Vacancies – Information Technology.<br>Entity: Confidential Government Entity Department: Information Technology<br>A confidential government entity announces the availability of several vacant positions within the Information Technology Department. Qualified and eligible candidates are invited to apply in accordance with the requirements outlined below.<br>Available Job Titles:Sr. Database Admin Sr. Network Eng. Operating System Engineer Sr. Software Developer Sr. Mobile APP Developer Sr. Software Developer management<br>General Duties and Responsibilities:• Performing assigned technical tasks in compliance with approved policies, procedures, and regulations• Providing technical support and ensuring continuity of IT services• Participating in the development, operation, and maintenance of information systems• Preparing technical reports and official documentation as required• Adhering to information security, data confidentiality, and cybersecurity regulations<br>General Qualifications and Requirements:• Bachelor’s or Diploma degree in Information Technology, Computer Science, or a related discipline• Relevant professional experience appropriate to the job title• Knowledge of IT infrastructure, systems, and cybersecurity standards• Ability to work within a team and comply with official work regulations• Strong communication and organizational skills<br>Employment Terms and Conditions:• Employment shall be subject to applicable laws, regulations, and internal policies• Job duties and responsibilities will be assigned based on the approved job title

Job Summary<br>We are seeking a dynamic and technically skilled Pre-Sales Engineer to drive solution design, customer engagement, and business growth across the Kingdom of Saudi Arabia. The role focuses on delivering end-to-end presales support for enterprise networking solutions, including DELL, HPE Aruba, Cisco, and Huawei.<br>The ideal candidate will work closely with sales, vendors, and partners to understand customer requirements, design scalable and cost-effective solutions, and support the full sales cycle—from opportunity identification and technical presentations to proposal development and deal closure.<br>This position requires strong expertise in networking technologies, excellent communication skills, and the ability to translate complex technical requirements into business-driven solutions.<br>Key Responsibilities Act as a trusted technical advisor to customers, partners, and internal sales teams across networking solutions. Lead solution design, sizing, and Bill of Quantities (BoQ) preparation aligned with customer requirements Support partner enablement, product positioning, and technical training to strengthen market capabilities Collaborate closely with vendor presales teams to develop competitive and tailored solutions Engage customers to gather requirements, conduct technical assessments, and propose optimized architectures Prepare and respond to RFIs, RFPs, and RFQs with high-quality technical and commercial documentation Develop proposals, quotations, and P&L analysis ensuring profitability and compliance with company standards Work closely with the Sales Director and Business Unit Head to drive pipeline growth, conversion, and profitability Deliver technical presentations, demos, and solution workshops to customers and partners Support account penetration strategies and identify upsell/cross-sell opportunities Maintain strong relationships with key stakeholders and ensure high levels of customer satisfaction Provide technical support during the sales cycle closure phase, ensuring successful deal execution<br>Required Skills & Expertise Strong experience in Networking Technologies:Routing & Switching Wireless (Wi-Fi) solutions Network Security IP Telephony / Collaboration Hands-on knowledge of DELL, HPE Aruba, Cisco, and Huawei solutions Solid understanding of IT Infrastructure and Low Current Systems Experience in solution design, BoQ creation, and technical proposal writing Strong presentation, communication, and stakeholder management skills Ability to translate customer requirements into scalable, cost-effective solutions Commercial awareness with understanding of pricing, margins, and deal structuring<br>Qualifications & Experience Bachelor’s Degree in IT, Computer Science, Engineering, or a related field Minimum 2+ years of experience in Pre-Sales Engineering or Technical Sales Proven experience in the KSA market Certifications (preferred):Cisco (CCNA / CCNP / CCDP or equivalent) Aruba / Huawei certifications are a plus Fluent in Arabic and English (written and spoken)

We are SGS – the world's leading testing, inspection and certification company. We are recognized as the global benchmark for sustainability, quality and integrity. Our 99,600 employees operate a network of 2,600 offices and laboratories, working together to enable a better, safer and more interconnected world. <br><br><br><br>Job Description<br><br>We are looking for an IT Support Specialist / IT Support Engineer to provide day-to-day technical support and ensure the smooth, secure, and reliable operation of the company's IT environment. The role will support employees both onsite and remotely, troubleshoot technical issues, maintain IT systems and equipment, and assist with user onboarding and access management. This is an onsite role and is suitable for someone who enjoys troubleshooting, working directly with users, and solving IT problems.<br><br>Provide timely IT support through tickets, phone, email, and in-person assistance. Troubleshoot and resolve hardware, software, operating system, application, printer, network, and VPN issues. Install, configure, update, and maintain computers, mobile devices, peripherals, and other IT equipment. Set up IT equipment, user accounts, software, and access for new employees and existing users. Manage and support Microsoft 365, Windows, Active Directory (AD/AAD), and user access. Monitor and support basic network, server, wireless, firewall, and VPN infrastructure. Maintain IT security by managing patches, access controls, malware protection, and security policies. Maintain accurate support tickets, technical documentation, knowledge-base articles, and IT records. Guide and train employees on the proper use of IT systems, software, hardware, and internal IT procedures. Escalate complex technical issues to senior IT teams or external vendors and follow through until resolution. Support the evaluation and implementation of new IT technologies and equipment based on business needs, performance, and cost. Identify opportunities to use AI tools and digitalization to improve IT support and business processes. <br><br>Qualifications<br><br>Bachelor's degree in Computer Science, Information Technology, or a related field is preferred. Relevant certifications are an advantage, such as: Comp TIA A+, Comp TIA Network+, CCNA, Microsoft 365 Fundamentals, ITIL, Relevant Microsoft/Azure or cybersecurity certifications. 2-3+ years of hands-on experience in IT Support, Helpdesk, Desktop Support, System Support, or a similar role. Strong knowledge of Windows operating systems and Microsoft 365. Practical experience with Active Directory / Azure Active Directory (AD/AAD) and user access management. Good understanding of networking fundamentals, including TCP/IP, VPN, Wi-Fi/wireless networks, firewalls, Layer 2 switches, and SD-WAN. Working knowledge of Windows Server and basic server support. Experience using remote support tools and IT ticketing systems. Good troubleshooting and problem-solving skills. Ability to explain technical issues clearly to non-technical users. Strong customer service, communication, organization, and time-management skills. Ability to manage multiple support requests and prioritize issues based on urgency. <br><br>Additional Information<br><br>Good to Have<br><br>Knowledge of Microsoft Azure / cloud technologies. Basic experience with SQL/database administration. Knowledge of cybersecurity and ISMS standards. Experience using AI tools and supporting digitalization initiatives. Experience creating IT documentation and knowledge-base resources.

<h3 >About Accenture Saudi Arabia</h3> <p >Accenture is a global professional services company that assists leading enterprises in reinvention by building their digital core, leveraging AI, and creating value at speed and scale. The company combines industry expertise, technology, and strategic thinking to deliver impactful outcomes for clients.</p> <h3 >The Role of Security Delivery Consultant</h3> <p >As a Security Delivery Consultant, you will operate as a senior practitioner embedded within client security operations in Jeddah. This full-time role involves managing the processes, tools, and personnel responsible for protecting enterprise environments. The position requires a blend of technical delivery skills and team leadership, enabling the consultant to function at an analyst level, lead a cyber team, and articulate complex security matters to diverse audiences.</p> <h3 >Key Responsibilities</h3> <ul > <li >Develop, implement, and continuously improve Cybersecurity Center processes, procedures, and policies, including incident response plans, SOC workflows, and operational runbooks.</li> <li >Collaborate with SIEM engineers and broader security teams to develop, refine, and tune correlation rules for enhanced detection accuracy and reduced noise.</li> <li >Analyze security events and provide real-time guidance to team members during investigations and active incidents.</li> <li >Administer and manage EDR technology across Windows, macOS, and Linux environments, covering deployment, upgrades, agent health monitoring, policy management, and integration with SIEM and other security tools.</li> <li >Administer and manage NDR technology, including developing policies, creating custom correlation rules, integrating with SIEM, and periodically reviewing configurations for enhancements.</li> <li >Manage support tickets with EDR/NDR vendors and coordinate resolution as needed.</li> <li >Utilize IR tools and solutions throughout the detection, investigation, and response lifecycle.</li> <li >Produce cyber intelligence reports that clearly communicate technical findings to information security staff, non-technical business stakeholders, and senior management.</li> <li >Lead the cyber team daily and provide on-call support outside business hours when required.</li> </ul> <h3 >Qualifications and Requirements</h3> <ul > <li >Proven experience in incident response planning and execution.</li> <li >Strong working knowledge of SOC policy, process, and procedure design.</li> <li >Hands-on experience with SIEM platforms and correlation rule development.</li> <li >Practical experience administering EDR and NDR technologies across multi-OS environments.</li> <li >Solid understanding of IR tools and solutions across detection, investigation, and response.</li> <li >Strong leadership skills with the ability to guide and develop a cyber team.</li> <li >Excellent verbal and written communication skills, capable of articulating technical and strategic security matters to diverse audiences, including senior management.</li> <li >Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.</li> </ul> <h3 >Preferred Qualifications</h3> <ul > <li >Experience integrating EDR/NDR with SIEM and broader security tooling ecosystems.</li> <li >Background in producing executive-level cyber intelligence reporting.</li> <li >Certifications such as GIAC GCIH, GMON, GCFA, or equivalent are strongly preferred.</li> </ul> <h3 >Work Type</h3> <p >This is a full-time position based in Jeddah, Saudi Arabia.</p>

<h3 >About the Role</h3> <p >Bupa Arabia is seeking a <strong >Senior Executive Manager - Cybersecurity GRC &amp; Data Protection</strong> to lead the daily operations of its Cyber Security Governance, Risk &amp; Compliance unit. This full-time position is based in <strong >Jeddah</strong> and is central to ensuring robust cybersecurity frameworks and data protection practices across the organization.</p> <h3 >Key Responsibilities: Cybersecurity Governance</h3> <ul > <li >Develop and maintain a comprehensive cybersecurity governance program.</li> <li >Document quality governance processes for Cyber initiatives, Business As Usual (BAU) operations, policies/standards, and contracts.</li> <li >Ensure processes are aligned with clear objectives and include defined oversight and review frequencies.</li> <li >Review and document RASCI (Responsible, Accountable, Consulted, Informed) matrices for all processes.</li> <li >Establish and ensure a continuous improvement cycle for all governance processes.</li> <li >Demonstrate and establish the value of the governance structure and processes within the organization.</li> </ul> <h3 >Key Responsibilities: Risk Management and Compliance</h3> <ul > <li >Design and implement an effective Cyber Security risk management process.</li> <li >Analyze current risks and identify potential risks that could affect Bupa Arabia.</li> <li >Evaluate the company’s previous handling of risks and compare potential risks against company criteria, including costs and legal requirements.</li> <li >Provide risk reporting tailored to the relevant audience, ensuring the board of directors is educated, business heads understand departmental risks, and individuals comprehend their accountability for specific risks.</li> <li >Explain external risks posed by Bupa Arabia to stakeholders.</li> <li >Design and implement a third-party risk operating model to identify, evaluate, and provide solutions for complex business and technology risks.</li> <li >Identify and address key third-party related risks and areas of concern associated with new and existing third-party relationships.</li> <li >Monitor Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for appropriate escalation to stakeholders.</li> <li >Develop a Third-Party Risk Management (TPRM) dashboard to highlight key program metrics and statistics, such as third-party portfolio risk, cyber security incidents, and program efficiencies.</li> <li >Maintain a comprehensive list of all legal and regulatory compliance requirements.</li> <li >Ensure periodic assessment of the efficiency of Cyber Security control systems and recommend effective improvements.</li> <li >Oversee the review and evaluation of Cyber Security procedures to identify hidden risks or common issues.</li> <li >Coordinate with various departments to review their respective compliance with Cyber Security Policies.</li> <li >Ensure the implementation of a program to perform periodic reviews on company procedures and processes.</li> </ul> <h3 >Key Responsibilities: Data Protection</h3> <ul > <li >Act as the Data Privacy Officer (DPO), ensuring Bupa Arabia processes personal data of staff, beneficiaries, providers, and other individuals in compliance with applicable KSA data privacy regulations.</li> <li >Identify personal data schemes and applicable privacy laws and regulations.</li> <li >Identify and analyze privacy risks relevant to the privacy ecosystem.</li> <li >Develop a data privacy mitigation plan to address identified privacy risks.</li> <li >Monitor the proper implementation of the mitigation plan in collaboration with other business units.</li> <li >Monitor compliance with the KSA Personal Data Protection Law (PDPL) and other data protection laws.</li> <li >Advise the Data Controller or Data Processor and their employees about their obligations to comply with the KSA PDPL and other data protection laws.</li> </ul> <h3 >Candidate Profile</h3> <p >The ideal candidate will bring extensive experience in the field. Applicants must have <strong >over 10 years of relevant experience</strong> in cybersecurity governance, risk, compliance, and data protection management.</p> <h3 >Work Setting</h3> <p >This is a <strong >full-time opportunity</strong> based in <strong >Jeddah</strong>, offering a pivotal role in strengthening Bupa Arabia's security posture.</p>

<h3 >About Accenture Saudi Arabia</h3> <p >Accenture is a global professional services company that assists leading enterprises in reinvention, building their digital core, leveraging AI, and creating value efficiently. The company integrates deep industry expertise, advanced technology, and innovative thinking to deliver impactful outcomes.</p> <h3 >Role Overview: Security Delivery Consultant</h3> <p >Accenture Saudi Arabia is seeking a full-time Security Delivery Consultant in Jeddah. This role involves embedding within client security operations, taking ownership of processes, tools, and personnel to ensure the protection of enterprise environments. The position requires a blend of technical delivery and team leadership, enabling the consultant to operate at an analyst level, lead a cyber team, and communicate complex security matters clearly to diverse audiences.</p> <h3 >Key Responsibilities</h3> <ul > <li >Develop, implement, and continuously improve Cybersecurity Center processes, procedures, and policies, including incident response plans, SOC workflows, and operational runbooks.</li> <li >Collaborate with SIEM engineers and broader security teams to develop, refine, and tune correlation rules for improved detection accuracy and reduced noise.</li> <li >Analyze security events and provide real-time guidance to team members during investigations and active incidents.</li> <li >Administer and manage EDR technology across Windows, macOS, and Linux environments, including deployment, upgrades, agent health monitoring, policy management, and integration with SIEM and other security tools.</li> <li >Administer and manage NDR technology, developing policies, creating custom correlation rules, integrating with SIEM, and periodically reviewing configurations for enhancements.</li> <li >Manage support tickets with EDR/NDR vendors and coordinate resolution as needed.</li> <li >Leverage IR tools and solutions across the full detection, investigation, and response lifecycle.</li> <li >Produce cyber intelligence reports that clearly communicate technical findings to information security staff, non-technical business stakeholders, and senior management.</li> <li >Lead the cyber team day-to-day and provide on-call support outside business hours when required.</li> </ul> <h3 >Required Qualifications and Skills</h3> <ul > <li >Proven experience in incident response planning and execution.</li> <li >Strong working knowledge of SOC policy, process, and procedure design.</li> <li >Hands-on experience with SIEM platforms and correlation rule development.</li> <li >Practical experience administering EDR and NDR technologies across multi-OS environments.</li> <li >Solid understanding of IR tools and solutions across detection, investigation, and response.</li> <li >Strong leadership skills with the ability to guide and develop a cyber team.</li> <li >Excellent verbal and written communication skills, capable of articulating technical and strategic security matters to diverse audiences, including senior management.</li> </ul> <h3 >Preferred Qualifications</h3> <ul > <li >Experience integrating EDR/NDR with SIEM and broader security tooling ecosystems.</li> <li >Background in producing executive-level cyber intelligence reporting.</li> <li >Certifications such as GIAC GCIH, GMON, GCFA, or equivalent are strongly preferred.</li> </ul>

Role Purpose:The IT Security Lead is responsible for implementing and managing ASD’s enterprise information security programme to protect its systems, data, and digital assets from cyber threats and ensure regulatory compliance. The role establishes and matures the organization's security posture through policy, technology, and awareness — with a specific focus on securing the SAP S/4HANA programme environment, Microsoft platforms, cloud infrastructure, and operational technology. The Security Lead operates within the B-ITSC governance framework and reports on security risk to executive leadership and the board.<br>Key Accountabilities:Own ASD’s information security strategy, policy framework, and security roadmap. Coordinate and maintain information security policies, standards, and procedures. Produce quarterly security risk reports for the IT Operations Manager. Conduct annual information security risk assessments; maintain the enterprise security risk register and treatment plans. Ensure compliance with applicable regulations including PDPL (Saudi Personal Data Protection Law), GDPR, and NCA ECC framework. Collaborate with the Security Operations Centre (SOC) function, monitoring and alerting. Lead incident response activities; own the Incident Response Plan and Playbooks for P1/P2 cyber security events. Manage threat intelligence feeds and vulnerability management programme; prioritize patching based on risk exposure. Conduct regular penetration testing, red team exercises, and security assessments; remediate findings within agreed SLAs. Oversee endpoint detection and response (EDR) using Microsoft Defender for Endpoint across all ASD devices. Manage Business Continuity Planning (BCP) and Disaster Recovery (DR) for cyber event scenarios. Define and govern the SAP S/4HANA security architecture including role-based access control, segregation of duties (SoD), and audit logging. Review SAP security design deliverables produced by the system integrator; validate against ASD’s security standards. Conduct SoD conflict analysis during UAT and prior to go-live; ensure remediation before production cutover. Manage security requirements for all application systems: Sales Buzz, Sales Code, Shelfr, SO99, and third-party Saa S. Collaborate with AFG, ASD’s Identity and Access Management (IAM) programme including Privileged Access Management (PAM) and Zero Trust implementation. Govern user provisioning, de-provisioning, and access certification processes across all systems including SAP and M365. Manage Azure Active Directory / Entra ID security configuration: MFA, Conditional Access, PIM, and identity protection. Define and enforce least-privilege access principles and role segregation policies across IT and business systems. Conduct quarterly access reviews and user entitlement audits; report exceptions to the IT Operations Manager. Deliver the organisation-wide security awareness and training programme; track completion rates and phishing simulation outcomes. Manage third-party and supply chain security risk assessments; include security requirements in vendor contracts. Liaise with Internal Audit on security-related audit findings; develop and track remediation action plans. Prepare for and support external regulatory audits and certifications, including NCA ECC, ISO 27001, and ZATCA security requirements. Produce monthly security metrics dashboards covering threat landscape, vulnerability posture, and compliance status.<br>Qualifications:Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field. CISM (Certified Information Security Manager) — required or CISA — preferred. Microsoft SC-200 (Security Operations Analyst) or SC-300 — advantageous.5–8 years of experience in information security, with at least 3 years in a security leadership role. Proven experience securing SAP environments including role design, SoD analysis, and SAP security audit. Experience with cloud security: Azure Security Center / Defender for Cloud, AWS Guard Duty, or GCP SCC. Knowledge of Saudi Arabia regulatory requirements: PDPL and NCA ECC cybersecurity framework — strongly preferred. Strong incident response and forensic investigation experience; crisis communication skills. GCC or FMCG industry experience is an advantage. Excellent risk communication skills; experience presenting security risk to executive and board audiences.

Job Purpose Lead and support the operation, security, reliability, and availability of IT infrastructure and systems across on-premises and cloud environments, including networks, infrastructure security, access controls, vulnerability management, and business continuity, to ensure secure and stable delivery of critical IT services.<br>Key Responsibilities & Duties:<br>Infrastructure & Cloud Operations Manage and support IT infrastructure across on-premises, Microsoft Azure, DEEM Cloud, and hybrid cloud environments. Monitor the availability, performance, and capacity of infrastructure services and address technical issues affecting service continuity. Support data center infrastructure, servers, backup solutions, and related technology services. Maintain secure configurations and technical hardening standards across infrastructure components.<br>Network & Connectivity Manage enterprise network infrastructure, including routers, switches, VLANs, MPLS, WAN connectivity, and Wi-Fi environments. Monitor network performance and availability and troubleshoot connectivity and infrastructure issues. Maintain secure connectivity between on-premises environments, cloud platforms, internet services, and external service providers. Support unified communications and voice services, including Cisco Call Manager, voice gateways, and SIP connectivity, as required.<br>Infrastructure & Systems Security Implement and maintain security controls across networks, servers, endpoints, databases, cloud environments, and digital services. Manage infrastructure security solutions, including firewalls, VPN, web proxy, endpoint protection, and secure remote access. Monitor security events and alerts through relevant monitoring platforms and investigate incidents based on their technical impact and priority. Support incident containment, service recovery, and improvement of security monitoring controls.<br>Access, Vulnerability & Security Management Manage and review user, system, and application access controls in accordance with approved security policies and least-privilege principles. Support multi-factor authentication and other access protection mechanisms across relevant systems and services. Analyze vulnerability assessment results and coordinate remediation and security patching activities. Verify the completion and effectiveness of security updates, technical hardening, and corrective actions.<br>Business Continuity & Disaster Recovery Support backup, restore, high-availability, and disaster recovery capabilities for critical IT services. Execute and participate in disaster recovery, failover, and service restoration tests. Verify the readiness and recoverability of critical systems across DEEM Cloud and data center environments. Identify technical risks affecting infrastructure availability and support appropriate mitigation actions.<br>Technical Projects, Readiness & Coordination Support infrastructure implementation, upgrades, and technical projects in coordination with internal teams, contractors, vendors, and service providers. Review infrastructure and security readiness before new systems and services are moved into production. Validate that security controls do not adversely affect system performance, connectivity, or service availability. Coordinate technical requirements and follow up on infrastructure-related issues with technology vendors and service providers.<br>Reporting & Continuous Improvement Prepare periodic operational reports covering infrastructure availability, security incidents, vulnerabilities, risks, and remediation progress. Monitor technical and security performance indicators and identify recurring issues and improvement opportunities. Maintain technical and security documentation to support operational continuity, audit requirements, and future improvements. Recommend practical improvements to infrastructure, security controls, monitoring tools, and operational processes.<br>Qualifications Bachelor’s degree, preferably in Information Technology, Computer Science, Computer Engineering, Network Engineering, or another field relevant to the role.<br>Experience6+ years of total professional experience.

Roles and Responsibilities:Conduct periodic and ad hoc cybersecurity risk assessments across IT and OT environments Perform OT-specific risk assessments on assets such as PLCs, HMIs, RTUs, and engineering systems Identify and document OT-relevant risk scenarios (e.g., control system disruption, unauthorized access, safety manipulation) Coordinate risk reviews as part of major IT/OT changes, such as system upgrades or new deployments Reassess risk posture following major changes, incidents, or regulatory updates Review and validate existing controls to calculate residual risk and prioritize treatment actions Provide standardized tools and guidance to support self-assessments by IT, OT, and business teams Support integration of assessment outcomes into control design, zoning, segmentation, and system deployment Track risk treatment progress and escalate overdue or high-priority items as needed Coordinate with performance management to define and monitor key risk indicators (KRIs) to proactively track changes in cybersecurity risk exposure Maintain the cybersecurity risk register, including OT-specific entries, capturing identified risks, likelihood and impact ratings, treatment plans, ownership, and status Coordinate and execute internal cybersecurity compliance assessments across all relevant domains and functions Serve as the lead interface for external audits and regulatory inspections, including preparation, execution, and response Conduct periodic compliance assessments of OT environments, including SCADA, DCS, PLCs, and associated network infrastructure Maintain an inventory of compliance-relevant OT assets and map them to applicable control requirements and standards Monitor adherence to cybersecurity policies, escalate non-compliance, and coordinate corrective actions with relevant teams Track and manage remediation plans for compliance gaps, non-conformities, and audit findings through closure Validate the effectiveness of implemented controls or mitigation plans before closing compliance gaps Review and validate configuration baselines for OT systems (e.g., firewall rules, firmware versions) to ensure alignment with compliance standards Coordinate evidence collection, documentation, and remediation planning for compliance-related findings Report OT and IT cybersecurity compliance status and risks to leadership and cybersecurity governance Support compliance awareness and training for teams with control responsibilities in both IT and OTMaintain a centralized compliance register, covering both IT and OT, that maps regulatory requirements to policies, controls, responsible teams, and evidence sources Govern third-party cybersecurity risk by maintaining standardized assessment processes, due diligence criteria, and remediation tracking Coordinate and conduct third-party cybersecurity assessments across IT and OT suppliers to ensure alignment with internal policies and regulatory requirements Review vendor-supplied OT systems and supporting documentation to ensure inclusion of security controls and compliance with applicable standards (e.g., NCA OTCC, IEC 62443) Ensure third-party risk findings are documented, risk-rated, and tracked through resolution, including acceptance or application of compensating controls Maintain a register of assessed vendors, associated risks, control gaps, and remediation status for ongoing oversight and reporting Collaborate with procurement, legal, and compliance to embed cybersecurity requirements into third-party agreements, including OT-specific clauses where applicable Contribute to the development and review of third-party security policy and minimum control requirements for use in procurement and onboarding Support internal and external audit requests related to third-party cybersecurity risk management<br><br>Requirements<br><br>Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field. Master's degree is preferred. 10-12+ years of cybersecurity experience Strong experience in cybersecurity risk management, compliance, assessments, and assurance

Operations Director – ELV & ICT Solutions ???? Riyadh, Saudi Arabia ???? CESCO<br>CESCO - Saudi is seeking an experienced and results-driven Operations Director to lead and oversee all ELV and ICT operations across Saudi Arabia. The successful candidate will be responsible for driving project delivery excellence, operational performance, profitability, and client satisfaction while leading high-performing teams across multiple projects.<br>Requirements:Bachelor's Degree in Engineering (MBA preferred). PMP Certification preferred. Cisco or other relevant technical certifications are an advantage.10-15 years of experience in ELV and ICT project execution and operations. Minimum 5 years in a senior leadership or director-level position. Strong GCC experience is required, with Saudi Arabia experience highly preferred. Professional fluency in English and Arabic is mandatory.<br>Key Responsibilities:Lead the end-to-end execution of ELV and ICT projects from initiation through final handover. Drive operational excellence, resource planning, and project performance across multiple projects. Build, mentor, and manage high-performing engineering, project, and operations teams. Develop and maintain strong relationships with clients, consultants, contractors, and key stakeholders. Monitor project budgets, profitability, risk management, and contractual obligations. Provide strategic reports, operational updates, and performance metrics to senior management. Manage vendor and supplier relationships to ensure successful project delivery. Ensure full compliance with HSE, QA/QC, and company standards across all operations. Support business growth initiatives and contribute to the company's strategic objectives within the Saudi market.<br>ICT Solutions Enterprise Networking (Cisco) Data Center Infrastructure Structured Cabling Systems Unified Communications Network Security Solutions ELV Systems CCTV & Video Surveillance Access Control Systems Building Management Systems (BMS) Public Address Systems Smart Building Technologies Integrated Security Solutions

<h3 >About 1Pass</h3> <p >1Pass is a leading Saudi fitness and wellness platform providing flexible access to gyms, studios, padel courts, spas, and recovery experiences across major cities in the Kingdom, including Jeddah and Makkah. Through a single subscription, users can customize their wellness journey. The company also offers comprehensive Corporate Wellness Programs designed to enhance employee wellbeing and productivity, providing data-driven insights and flexible activity options tailored to organizational needs. 1Pass is focused on building a dynamic, health-centered ecosystem powered by technology and user experience.</p> <h3 >The Role of Cloud Infrastructure &amp; DevOps Engineer (GCP)</h3> <p >1Pass is seeking a <strong >Cloud Infrastructure &amp; DevOps Engineer (GCP)</strong> to join the team in Makkah. This full-time role requires 2-5 years of experience and involves hands-on ownership of the Google Cloud environment's health, building and maintaining CI/CD pipelines, and acting as the primary point of contact for infrastructure security. The position focuses on ensuring robust, secure, and efficient cloud operations.</p> <h3 >Key Responsibilities</h3> <ul > <li >Provision and operate the Google Cloud environment, including compute, managed databases, storage, VPC networking, load balancing, and DNS.</li> <li >Define environments in Terraform to ensure reproducible and versioned staging and production setups.</li> <li >Manage backups, restore testing, disaster recovery, and capacity planning.</li> <li >Set up monitoring, logging, and alerting systems for early issue detection.</li> <li >Track and optimize cloud expenditure.</li> <li >Build and maintain deployment pipelines using Cloud Build, GitHub Actions, or GitLab CI.</li> <li >Containerize services with Docker and manage image registries.</li> <li >Implement automated testing gates, staged environments, safe rollbacks, and zero-downtime releases.</li> <li >Reduce manual steps and document platform operations.</li> <li >Enforce least-privilege IAM across cloud and internal systems, and support periodic access reviews.</li> <li >Manage secrets and keys securely, keeping credentials out of code and pipelines.</li> <li >Harden the environment through firewall rules, network segmentation, TLS, WAF, and patching.</li> <li >Conduct vulnerability and dependency scanning, and drive remediation with the engineering team.</li> <li >Maintain audit trails and support incident response.</li> <li >Ensure regulated workloads and data are hosted within Saudi Arabia.</li> <li >Support alignment with NCA cybersecurity controls and the Saudi Personal Data Protection Law (PDPL).</li> <li >Maintain architecture documentation, runbooks, and control evidence for audits.</li> </ul> <h3 >Qualifications and Requirements</h3> <ul > <li >3-5 years of experience in DevOps, cloud infrastructure, SRE, or platform engineering.</li> <li >Hands-on experience with Google Cloud Platform. Strong AWS or Azure experience with a clear willingness to work on GCP will also be considered.</li> <li >Solid Linux administration skills.</li> <li >Proficiency in Infrastructure as Code with Terraform or equivalent.</li> <li >Experience with Docker in production and familiarity with Kubernetes concepts.</li> <li >Demonstrated ability to build and maintain CI/CD pipelines end-to-end.</li> <li >Scripting and automation skills in Bash and Python.</li> <li >Understanding of networking fundamentals: VPC design, DNS, TLS, load balancing, and firewall rules.</li> <li >Operational familiarity with relational databases, including backups and restores.</li> <li >A security-first mindset regarding least privilege, blast radius, and auditability.</li> <li >Good written and spoken English, with clear documentation habits.</li> </ul> <h3 >Preferred Qualifications</h3> <ul > <li >Working knowledge of NCA compliance frameworks and their translation into technical controls.</li> <li >Familiarity with Saudi PDPL or other local regulatory requirements.</li> <li >Google Cloud certification: Associate Cloud Engineer, Professional Cloud DevOps Engineer, or Professional Cloud Security Engineer.</li> <li >A security certification such as CompTIA Security+, CySA+, or similar.</li> <li >Arabic language skills.</li> </ul> <h3 >Application Process</h3> <p >Candidates who meet the above requirements are encouraged to apply. Salary for this position will be disclosed during the interview process.</p>

Design and maintain enterprise cybersecurity architecture frameworks and standards. Review solution, infrastructure, cloud, and application architectures to ensure security requirements are embedded throughout the project lifecycle. Define security architecture principles, patterns, and reference architectures. Conduct architecture risk assessments and recommend appropriate security controls. Collaborate with Enterprise Architecture, Infrastructure, Cloud, Network, and Application teams to integrate security-by-design principles. Evaluate emerging technologies and recommend secure implementation approaches. Support cloud security architecture across Azure, AWS, and/or Google Cloud environments. Define requirements for Identity & Access Management (IAM), Zero Trust, network segmentation, encryption, and privileged access. Ensure compliance with cybersecurity frameworks and regulatory requirements (NCA ECC, NIST CSF, ISO 27001, CIS Controls). <br><br>Requirements<br><br> Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field. Master's degree is preferred. Minimum 3-4 years in Cybersecurity Architecture or Security Engineering