Security Officer Jobs in Saudi

Job Purpose:<br><br>The Commercial Services Officer is responsible for managing and developing commercial service activities within the terminal, ensuring high-quality service delivery to concessionaires, partners, and passengers while supporting revenue generation objectives.<br><br>Job Responsibilities:<br><br>Oversee and coordinate day-to-day commercial service activities within the terminal commercial operations area Manage relationships with commercial service providers, vendors, and partners operating within the terminal Monitor and ensure compliance of commercial service operators with contractual obligations, service standards, and airport regulations Identify opportunities to introduce new commercial services and enhance existing offerings to improve passenger experience and increase non-aeronautical revenue Conduct regular inspections and audits of commercial service areas to ensure quality, safety, and brand standards are maintained Handle operational issues, escalations, and complaints related to commercial services in a timely and professional manner Prepare performance reports, revenue analysis, and service quality dashboards for management review Support the negotiation and administration of commercial service contracts and agreements Collaborate with the F&B, Retail & Duty Free, and Area Allocation teams to ensure integrated and seamless commercial operations across the terminal Liaise with other departments (Operations, Security, Facilities) to support the smooth functioning of commercial service areas Maintain accurate records of agreements, permits, and commercial service documentation<br><br>Requirements<br><br>Education requirements: Bachelor's degree in Business Administration, Commerce, or a related field.<br><br>Certification Requirements: Relevant certifications in Commercial Management, Retail Operations, or Hospitality are an advantage.<br><br>Experience: Minimum 2 years of relevant experience including 1 year in Airports.<br><br>Languages: Arabic (Fluent), English (Proficient).<br><br>Technical Skills: <br><br>MS Office Suite (Word, Excel, Power Point) Reporting & data analysis Contract & document management Commercial operations systems.

Position: Cybersecurity Architecture Manager Location: Riyadh Saudi Arabia Contract Duration: 15th October 2026 - 28th Feb 2027<br>We are seeking an experienced Cybersecurity Architecture Manager to lead secure-by-design architecture across IT, cloud, and, where applicable, OT/ICS environments for a major football event project in Saudi Arabia. The role will be responsible for ensuring that new systems, applications, integrations, infrastructure, and vendor-delivered solutions meet cybersecurity requirements before go-live. This is a highly collaborative role involving cybersecurity, IT, cloud, procurement, vendors, and operational teams. The successful candidate will play a key role in ensuring that cybersecurity is embedded into the design and delivery of event-related technology environments.<br>Responsibilities Own and lead secure-by-design cybersecurity architecture across IT, cloud, and, where applicable, OT/ICS environments. Define, maintain, and enforce enterprise cybersecurity architecture standards covering: Network segmentation Identity and access architecture Cryptography and encryption standards Cloud security architecture and landing zones Secure infrastructure and application design Conduct security architecture reviews and design-stage risk assessments for new applications, integrations, infrastructure, and vendor-delivered solutions. Manage a high volume of architecture reviews associated with third-party and event technology systems, including ticketing, accreditation, broadcast, hospitality, venue, and operational platforms. Own cloud security architecture and ensure appropriate security controls are incorporated wherever cloud services are used. Define secure configuration baselines and hardening standards for infrastructure, applications, and security technologies. Where applicable, establish security requirements for event-specific OT/ICS environments, including access control, turnstiles, venue systems, and related operational technologies. Partner closely with the Cybersecurity Defense Manager to ensure architecture decisions support effective security monitoring, detection, and incident response. Own cybersecurity requirements and security controls within procurement, vendor selection, and vendor onboarding processes. Provide cybersecurity architecture input into business continuity and disaster recovery designs. Maintain a register of architectural exceptions, associated risks, compensating controls, and remediation requirements. Provide technical guidance to project teams, IT teams, vendors, and other cybersecurity stakeholders. Ensure cybersecurity architecture aligns with organizational security policies, standards, and applicable regulatory requirements. Support security design decisions throughout the project lifecycle, from initial design through implementation and go-live.<br>Qualifications3+ years of relevant cybersecurity architecture experience. Proven experience in cybersecurity architecture, security architecture, or information security architecture. Strong understanding of enterprise security architecture principles and secure-by-design practices. Experience with network security, segmentation, identity and access management, encryption/cryptography, and security controls. Experience conducting security architecture reviews and risk assessments. Experience with cloud security architecture and cloud environments. Knowledge of infrastructure and application security hardening and secure configuration standards. Experience working with third-party vendors and technology procurement/security requirements. Understanding of cybersecurity monitoring, detection, and incident response requirements. Strong communication skills with the ability to work with technical and non-technical stakeholders. Experience in large-scale projects, major events, or complex multi-vendor environments would be an advantage. Knowledge of OT/ICS security would be an advantage where relevant to the operating environment.<br>Required Skills Cybersecurity architecture Security architecture Information security architecture Enterprise security architecture principles Secure-by-design practices Network security and segmentation Identity and access management Encryption and cryptography Security controls Security architecture reviews and risk assessments Cloud security architecture and cloud environments Infrastructure and application security hardening Secure configuration standards Third-party vendor management and technology procurement/security requirements Cybersecurity monitoring, detection, and incident response requirements Strong communication skills<br>Preferred Certifications Relevant industry certifications would be an advantage, such as: CISSPSABSACCSPTOGAFCloud security certifications Other recognized cybersecurity architecture or information security certifications

Job Summary<br>To efficiently and profitably manage and direct activities in passenger services department by providing a safe, quality product covering a range of ground handling services to its customers and overall accountable for operations at the terminal (above wings)<br>Responsibilities<br>Provide leadership and work direction to the Passenger Handling teams Ensure compliance to set department Key Performance Indicators (KPI’) Monitor all the handling services provided at the Terminal for Scheduled and Adhoc operations Monitor attendance of all Passenger Handling staff (Check In, Lost & Found, MAAS/PRM) Hold briefings with all Passenger Handling teams (Check In , Lost & Found , MAAS) before start of operations Liaise with the shift supervisors on the duty allocations for the day Ensure that all positions (Check In Counters , Transfer desk & Arrivals) are opened as per SLA’s Coordinate with shift supervisors on cross utilization of resources by re-allocating/re-assigning coupled with innovate staff management Ensure that documents profile desk at Check in & Gate has been set up as per SLA’s (where applicable) Ensure & monitor gate and transfer desk processes per flight as per SLA’s Liaise & coordinate with the MAAS /PRM team on all special handling requests (WCHR/UM/DEPU) Monitor & coordinate flight close out as per SLA’s and dispatch paperwork Queue management at the departure terminal to ensure seamless operations Participate in periodic performance reviews and disciplinary sessions of the staff Engage customers and authorities be present at all times at the terminal during operations for any queries Make spot checks at arrival hall to ensure that pre-flight set up has been done Monitor first bag / last bag offload processes at the arrivals Review the AHL / OHD list & updating of files at the end of the shift Liaise with shift supervisors that customer supplied products and stationery are stored accordingly after end of operations Ensure that deviations from the daily operations are properly covered (e.g. extra flights, charters , delayed flights) and reconciliation done for any monies collected for any adhoc services Monitor and cross check that all post flight paperwork and activities have been finalized Hold debriefings when & as required with the teams Investigate all operational irregularities at the terminal and submit reports /recommendations to the Manager , Passenger Services & Duty Station Manager Responsible for reporting occurrences, events, violations and acts that may affect safety, security and company reputation at the terminal Maintain & enforce company policies Maintain a comprehensive and accurate log / inventory of support tools such as Communication radios ,Mobile phones , Tablets , WCHR’s and report any defects immediately Issue the long term planning / allocation (next 24H) , cross check of resources (Manpower and Equipment’s) Ensure that data capture and daily reports as per defined formats &/or in the Swissport reporting tools (FSC, SOR, D. A. T. E etc.) are accurate & promptly submitted Generate a summary report of all activities at the terminal after end of the shift Liaise and coordinate with Duty Officer Ramp to ensure flights are dispatched on time Carry out any additional duties as instructed by management<br>Qualifications and Competencies Minimum 3 years Passenger Services Supervisor experience Excellent verbal and written communication skills in English (Arabic in addition is an advantage) Excellent knowledge of all functions in Passenger Services Strong organizational and multi tasking skills Leadership ability Customer focus and quality awareness Ability to deal with conflict Valid Driver’s License Ability to work in inclement weather Ability to work under pressure Ability to work flexible hours

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Company Description<br><p><strong>Work Force Solution</strong> is a leading sourcing and recruitment firm, dedicated to delivering exceptional talent solutions to top-tier hospitality and restaurant groups across Saudi Arabia. With a strong reputation for quality, efficiency, and reliability, we partner with clients to meet their workforce needs and support their operational excellence.</p><br><br>Job Description<br><ul><li>Deliver personalized concierge services to hotel guests.</li><li>Arrange transportation, restaurant reservations, tours, and other guest requests.</li><li>Provide accurate information about local attractions, shopping, dining, and entertainment.</li><li>Coordinate with hotel departments to ensure seamless guest experiences.</li><li>Handle VIP guest requests with professionalism, discretion, and attention to detail.</li><li>Resolve guest inquiries and concerns promptly while maintaining the highest service standards.</li></ul><br>Qualifications<br><ul><li>Previous experience as a Concierge, Guest Relations Officer, Guest Experience Agent, or in a similar role within a luxury hotel.</li><li>Excellent communication and interpersonal skills.</li><li>Professional appearance and positive attitude.</li><li>Strong knowledge of hospitality service standards.</li><li>Proficiency in English; additional languages are an advantage.</li><li>Transferable Iqama is required.</li><li>Candidates must be available to join immediately</li></ul><br>Additional Information<br><ul><li>Competitive salary package</li><li>Professional and supportive work environment</li><li>Opportunities for growth within a reputed international brand</li></ul><br><br> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> No experience required </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Location: Dammam, Saudi Arabia Employment Type: Full-Time | Onsite Project Duration: Long-term project assignment About the Role We are looking for a Database Encryption &amp; Database Security Engineer to support the protection, monitoring, and security of sensitive and critical databases.<br> The role will focus on database encryption, database security monitoring, onboarding of database servers, policy configuration, alert management, and integration of database security events with the central security operations environment.<br> Key Responsibilities Support encryption of sensitive and critical databases.<br> Implement and maintain database security and encryption configurations.<br> Integrate database security and monitoring solutions with in-scope database environments.<br> Onboard additional database servers and applications to the security monitoring platform.<br> Configure database monitoring policies, audit rules, alerts, and security controls.<br> Monitor database activity and investigate suspicious or unauthorized activity.<br> Coordinate with DBAs to implement database security and encryption requirements.<br> Support integration of database security alerts with SIEM/SOC platforms.<br> Assist in privileged-user monitoring and database access-control activities.<br> Support security assessments, compliance reviews, and audit evidence collection.<br> Perform platform health checks, maintenance, troubleshooting, and upgrades.<br> Maintain technical documentation, configuration records, and operational procedures.<br> Required Qualifications &amp; Experience Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems , or related discipline.<br> 5+ years of experience in database security, database administration, cybersecurity, or data protection.<br> Experience with Oracle, Microsoft SQL Server, PostgreSQL , or comparable enterprise database platforms.<br> Knowledge of database encryption, auditing, access controls, privileged access, and database activity monitoring.<br> Experience with enterprise database security/DAM platforms such as Imperva, IBM Guardium, Oracle Audit Vault/Database Vault , or equivalent is preferred.<br> Experience integrating database security alerts with SIEM/SOC platforms is an advantage.<br> Must be available full-time onsite in Dammam .<br> Required Certification CompTIA Security+ or equivalent recognized cybersecurity certification .<br> Preferred Certifications &amp; Training Imperva Data Security / DAM certification or official training.<br> IBM Guardium certification or official training.<br> Thales DAM-related training where applicable.<br> Oracle database security or administration certification.<br> Microsoft SQL Server security or administration certification.<br> Core Competencies Database Security | Database Encryption | DAM | Oracle | SQL Server | PostgreSQL | SIEM Integration | Audit Logging | Access Control | Security Monitoring Please ensure your CV clearly identifies the database platforms and database-security technologies you have worked with.<br></span> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> No experience required </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

Manager – Industrial & Physical Security ???? Location: Saudi Arabia???? Company: ACWA???? Saudi Nationals<br>About ACWAACWA is a leading developer, investor and operator of power generation, renewable energy and water desalination projects, with a major portfolio of critical infrastructure assets across Saudi Arabia and international markets.<br>As our portfolio continues to grow, we are strengthening our Industrial Security & Crisis Management function and are looking for an experienced Manager – Industrial & Physical Security (SAIS/HCIS).<br>About the Role This role will act as ACWA's subject matter expert for SAIS/HCIS Industrial Security (SEC) requirements, helping ensure our projects and operating facilities meet Saudi Arabia's industrial and physical security requirements.<br>You'll work across the project lifecycle — from early security assessments and design through construction, commissioning and operation — providing specialist guidance on physical security, security systems, critical infrastructure protection and regulatory compliance. The role will work closely with project companies, engineering teams, consultants, EPC contractors and government authorities to ensure security requirements are properly designed, implemented and maintained.<br>Key Responsibilities Lead the implementation and monitoring of SAIS/HCIS Industrial Security requirements across ACWA projects and operational facilities. Provide technical guidance and interpretation of SAIS SEC directives and regulatory requirements. Support Security Risk Assessments (SRA), Business Criteria Analysis (BCA) and Vulnerability Assessments. Review physical security designs, engineering packages, security studies and regulatory submissions. Provide oversight of security systems including CCTV, access control, perimeter intrusion detection, security command centres and security communications. Support the assessment and implementation of security lighting, vehicle barriers, perimeter protection and other protective security measures. Ensure physical security requirements are incorporated throughout project design, construction, commissioning and operation. Monitor implementation against approved designs and applicable SAIS requirements. Coordinate SAIS inspections, audits, assessments and regulatory engagements. Track regulatory observations, commitments and corrective actions through to closure. Provide guidance on critical infrastructure protection and industrial security operations. Support project companies in developing effective site security plans and operating procedures. Conduct or support security audits, compliance assessments, site inspections and gap analyses. Support security awareness, training and capability development across the organisation.<br>What We're Looking For Saudi Nationals. Bachelor's degree in Industrial Security, Engineering or a related discipline. Strong experience within Industrial Security, Physical Security, Security Operations or Critical Infrastructure Protection. Practical knowledge of HCIS / SAIS Industrial Security (SEC) requirements in Saudi Arabia. Experience within power generation, utilities, water/desalination, energy, oil & gas, petrochemicals or other critical infrastructure sectors. Experience with physical security systems including CCTV, access control and perimeter protection. Experience conducting or supporting Security Risk Assessments, Vulnerability Assessments and/or security compliance programmes. Experience engaging with Saudi government authorities and regulatory bodies. Strong Arabic and English communication skills.<br>Preferred Experience Previous experience within a major Saudi industrial or critical infrastructure organisation. SAIS approval. Experience supporting projects from design/construction through to operation. Experience working across multiple projects or operational facilities. Relevant professional security qualifications such as CSMP or equivalent.<br>Why Join ACWA? This is an opportunity to work beyond the security requirements of one facility and influence industrial and physical security across a major portfolio of critical infrastructure assets. You'll work across projects and operational facilities, engaging with technical teams, senior stakeholders and Saudi government authorities while helping ensure ACWA's assets meet the required standards for industrial security and critical infrastructure protection.

<p>The job holder is responsible for supports the cybersecurity architecture and project function by assisting in the application of security design standards, preparing documentation, and participating in the implementation of secure solutions under guidance</p><p>Ensure work is performed based on approved policies, processes, procedures and instructions. Identify opportunities for continuous improvement of the systems, practices, cost optimization, and productivity &amp; efficiency improvement. Ensures compliance with all applicable laws, rules, regulations, and standards within WTCO and related functions such as but not limited to (HC, HSSE, Risk and Cybersecurity, etc..). Escalate problems to ensure case/issue is closed efficiently and in a timely manner. Collaborate with enterprise architects to embed security into cross-domain designs. Check advanced solution architectures to validate adherence to Zero Trust. Analyze new technologies to assess secure integration possibilities.</p><p>Apply advanced security patterns to critical business applications. Conduct in-depth risk workshops to evaluate design alternatives. Perform validation of complex system integrations to ensure compliance. Maintain enterprise-level architecture patterns to reflect evolving threats. Assist in drafting policies to incorporate advanced architecture practices. Submit high-level risk assessments to leadership for decision-making. Gather metrics on design performance to track strategic objectives. Present technical findings to influence leadership and project outcomes. Collaborate with other specialists to harmonize architecture approaches.</p><p>Education Requirements</p><p>Key Communications</p><p>External Stakeholders All Departments External Stakeholders Consultants/Contractors Vendors/Suppliers/service providers Government authorities and entities</p><p>Disclaimer</p><p><strong>Desired Candidate Profile</strong></p><ul><li>Bachelor s in Computer Science or Relevant fields</li><li>Bachelors in Information Technology or Relevant fields</li></ul>

???? We’re Hiring | Cybersecurity & Infrastructure Security Specialist<br>Company: [Masharah Company]<br>We are looking for an experienced Cybersecurity & Infrastructure Security Specialist to take ownership of the company’s cybersecurity requirements, security architecture, risk management, and overall security posture.<br>This role will serve as the company’s technical security authority and primary security representative when dealing with external cybersecurity, infrastructure, network, and technology service providers.<br>The successful candidate will be responsible for identifying security risks and gaps, defining the required security controls, evaluating and selecting appropriate solutions, leading technical discussions with service providers, overseeing implementation, and validating that the delivered environment meets the company’s security requirements.<br>???? Key Responsibilities<br>* Own and continuously assess the company’s overall cybersecurity and infrastructure security posture.* Conduct security assessments and identify security gaps, risks, vulnerabilities, and areas requiring improvement.* Define cybersecurity requirements, security controls, and technical security standards.* Develop and review security architecture covering: * Network Security * Firewalls / NGFW * Network Segmentation * DMZ / WAF * VPN / ZTNA * Servers & Virtualization * Identity & Access Management * EDR/XDR * SIEM / SOC * Backup & Disaster Recovery * Application & Data Security* Develop cybersecurity and infrastructure security requirements for external service providers.* Identify, evaluate, and recommend appropriate cybersecurity technologies and solutions.* Lead technical meetings and discussions with cybersecurity, network, infrastructure, and other service providers.* Challenge and evaluate vendors’ proposed architectures, technologies, configurations, and security recommendations.* Review security architecture, HLDs, LLDs, technical proposals, BoQs, and implementation plans.* Oversee security implementation and ensure agreed security requirements and controls are correctly implemented.* Validate and test security controls before accepting implemented solutions.* Establish and oversee vulnerability management and remediation processes.* Coordinate penetration testing and security assessments and ensure findings are properly remediated.* Define and oversee security monitoring, logging, SIEM/SOC, EDR/XDR, and alerting requirements.* Establish incident response, containment, recovery, and security incident-handling requirements.* Define and review IAM, MFA, RBAC, PAM, privileged access, and network access-control requirements.* Ensure appropriate security hardening and secure configuration of infrastructure and security systems.* Review Git Hub, CI/CD, Dev Sec Ops, and application security practices where applicable.* Review backup, disaster recovery, business continuity, RTO/RPO, and ransomware-resilience requirements.* Assess data protection, data residency, and cross-border data-transfer considerations.* Identify applicable Saudi cybersecurity and data protection requirements and support compliance efforts.* Maintain cybersecurity policies, standards, risk registers, security architecture, and technical documentation.* Provide management with regular updates on security risks, gaps, priorities, and remediation progress.* Act as the primary technical security representative between the company and external service providers.<br>???? Requirements<br>* 3–5+ years of professional experience in Cybersecurity, Infrastructure Security, Network Security, Security Engineering, or a closely related field.* Strong practical understanding of cybersecurity principles and security architecture.* Demonstrated experience conducting security assessments and identifying security gaps and risks.* Strong knowledge of network security, including: * Firewalls / NGFW * IPS/IDS * Network segmentation * VLANs * DMZ * VPN / ZTNA * Secure remote access* Good understanding of server, virtualization, endpoint, and infrastructure security.* Knowledge of IAM, MFA, RBAC, PAM, and privileged-access management.* Experience or strong understanding of EDR/XDR, SIEM, SOC, security monitoring, and centralized logging.* Understanding of WAF and web/application security.* Knowledge of vulnerability management and penetration-testing processes.* Understanding of backup, disaster recovery, business continuity, RTO/RPO, and ransomware resilience.* Familiarity with Git Hub, CI/CD, Dev Sec Ops, and application security is a strong advantage.* Ability to review, evaluate, and challenge technical architectures, security designs, configurations, and vendor proposals.* Strong experience communicating with technical stakeholders, vendors, and service providers.* Strong analytical and problem-solving skills.* Ability to work independently and take ownership of cybersecurity requirements and decisions.* Strong written and verbal communication skills in English.* Arabic communication skills are a plus.<br>???? Preferred Certifications<br>The following certifications are considered a strong advantage:<br>* CISSP / CISM* Security+* CCNA / CCNP* Palo Alto Networks certifications* Fortinet certifications* ISO 27001-related certifications* Other relevant cybersecurity or infrastructure security certifications<br>???? What We’re Looking For<br>We are looking for someone who can own cybersecurity from the company’s side, rather than simply coordinate between vendors.<br>The ideal candidate should be capable of:<br>Identify → Assess → Design → Recommend → Lead → Implement → Validate → Improve<br>You should be comfortable moving between management-level discussions and detailed technical discussions with cybersecurity and infrastructure engineers.<br>You will be expected to independently assess proposed solutions, identify security gaps, challenge vendors when necessary, and ensure that the company’s security requirements are properly addressed.<br>???? Position Details<br>Location: Jeddah, Saudi Arabia Work Model: Hybrid : (Remote/attendance) based on work needs.(Expected) Onsite Attendance: Typically once/twice per week in Jeddah, with additional attendance when required for important meetings, vendor discussions, implementation activities, assessments, audits, or other business needs. Employment Type: Full-Time<br>???? To Apply: Please send your CV,To [office@masharah.com]<br>Please share this opportunity with anyone who may be a suitable candidate.

Key Responsibilities:✅ Monitor security alerts and manage Security Information and Event Management (SIEM) tools✅ Perform vulnerability assessments and coordinate remediation activities✅ Manage firewalls, endpoint protection, antivirus, and intrusion detection systems✅ Conduct regular security audits and risk assessments across the IT landscape✅ Investigate and respond to security incidents and security breaches✅ Support SAP security roles, authorizations, and compliance controls✅ Implement and enforce security policies, standards, and best practices✅ Coordinate security patching and system upgrades with vendors and internal teams✅ Conduct cybersecurity awareness training and phishing simulation exercises✅ Maintain security documentation, audit records, and incident reports<br><br><br>Qualifications:✔ Bachelor's degree in Cyber Security, Information Technology, Computer Science, or a related field✔ 3+ years of experience in cybersecurity, security operations, or a similar role✔ Hands-on experience with SIEM solutions, vulnerability management, and incident response✔ Strong knowledge of network security, firewalls, IDS/IPS, endpoint security, and threat detection✔ Familiarity with cybersecurity frameworks and compliance standards✔ Experience with SAP security administration is an advantage✔ Security certifications such as Security+, CEH, CISSP, CISM, or equivalent are preferred

<h3 >About the Role</h3> <p >Tibah Airports Operation Co. is seeking a <strong >Commercial Services Officer</strong> to manage and develop commercial service activities within the terminal. This full-time role focuses on ensuring high-quality service delivery to concessionaires, partners, and passengers, while actively supporting revenue generation objectives. The position requires 2-5 years of relevant experience.</p> <h3 >Role Purpose</h3> <p >The primary purpose of the Commercial Services Officer is to oversee the operational aspects of commercial services within the airport terminal. This involves maintaining service standards, fostering partner relationships, and identifying opportunities for growth to enhance passenger experience and increase non-aeronautical revenue.</p> <h3 >Key Responsibilities</h3> <ul > <li >Oversee and coordinate daily commercial service activities within the terminal's commercial operations area.</li> <li >Manage relationships with commercial service providers, vendors, and partners operating within the terminal.</li> <li >Monitor and ensure compliance of commercial service operators with contractual obligations, service standards, and airport regulations.</li> <li >Identify opportunities to introduce new commercial services and enhance existing offerings to improve passenger experience and increase non-aeronautical revenue.</li> <li >Conduct regular inspections and audits of commercial service areas to ensure quality, safety, and brand standards are maintained.</li> <li >Handle operational issues, escalations, and complaints related to commercial services in a timely and professional manner.</li> <li >Prepare performance reports, revenue analysis, and service quality dashboards for management review.</li> <li >Support the negotiation and administration of commercial service contracts and agreements.</li> <li >Collaborate with the F&amp;B, Retail &amp; Duty Free, and Area Allocation teams to ensure integrated and seamless commercial operations across the terminal.</li> <li >Liaise with other departments (Operations, Security, Facilities) to support the smooth functioning of commercial service areas.</li> <li >Maintain accurate records of agreements, permits, and commercial service documentation.</li> </ul> <h3 >Experience Requirements</h3> <ul > <li >A minimum of 2 to 5 years of experience in commercial services, airport operations, or a related field.</li> </ul> <h3 >Work Type</h3> <p >This is a full-time position.</p> <h3 >Application Process</h3> <p >Interested candidates are encouraged to apply for this role.</p>

Security Manager We are seeking an experienced Security Manager to oversee and manage all security operations across the site. The successful candidate will be responsible for ensuring a secure environment, maintaining security readiness, managing the security team, and ensuring compliance with applicable security regulations and requirements in the Kingdom of Saudi Arabia.<br>Key Responsibilities Oversee all security operations, systems, and activities across the site. Develop and implement security procedures, emergency response plans, and crisis management plans. Lead, manage, and develop the security team while monitoring performance and operational effectiveness. Ensure compliance with applicable security regulations, standards, and requirements. Conduct security risk assessments and implement appropriate preventive and corrective measures. Coordinate effectively with relevant government and security authorities. Prepare periodic security reports and follow up on corrective actions and identified risks. Ensure the readiness, reliability, and effectiveness of security systems and equipment. Respond effectively to security incidents and emergencies and ensure appropriate escalation and reporting. Qualifications & Requirements Valid approval/accreditation from the High Commission for Industrial Security (HCIS) – Mandatory. Relevant experience in security management, preferably within industrial facilities or large-scale organizations. Proven experience in managing security and guarding teams. Good knowledge of security regulations, standards, and requirements applicable in the Kingdom of Saudi Arabia. Strong leadership, management, communication, and decision-making skills. Ability to effectively manage emergencies, security incidents, and crisis situations. Strong report-writing, security planning, and risk assessment skills. Fluency in Arabic; proficiency in English is an added advantage.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>We are seeking an experienced Team Lead – Network Security Operations with 10+ years of experience to lead the day-to-day operations of the Network Security team.<br> The ideal candidate will oversee network security infrastructure, ensure the availability and security of enterprise environments, and provide technical leadership while supporting operational excellence.<br> Key Responsibilities Lead and manage the Network Security Operations team.<br> Oversee daily network security operations and ensure service availability.<br> Manage and support enterprise network security infrastructure.<br> Monitor, investigate, and resolve network security incidents.<br> Ensure security policies, standards, and operational procedures are followed.<br> Coordinate with infrastructure, cybersecurity, and other IT teams.<br> Review and approve network security changes and configurations.<br> Prepare operational reports and maintain technical documentation.<br> Drive continuous improvement of network security operations.<br> Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.<br> 10+ years of experience in network security operations.<br> Experience leading technical teams in an enterprise environment.<br> Strong understanding of network security technologies and operations.<br> Experience managing security incidents and operational support.<br> Strong leadership, communication, and problem-solving skills.<br> Nice to Have Experience working in enterprise or large-scale environments.<br> Network security certifications.<br> Experience with ITIL or service management processes.<br></span> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> 1+ years </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<h3 >About Sifi and the Role</h3> <p >Sifi is a fast-growing B2B FinTech company specializing in spend management and card issuance solutions, helping companies control spending and streamline expense workflows. We are seeking a <strong >Cybersecurity GRC Specialist</strong> to join our team in Riyadh, Ar Riyad. This full-time position requires 2-5 years of relevant experience and is central to maintaining Sifi’s cybersecurity compliance posture and ensuring audit readiness.</p> <h3 >Role Overview</h3> <p >The Cybersecurity GRC Specialist plays a critical role in maintaining Sifi’s cybersecurity compliance posture and ensuring audit readiness across all regulatory frameworks. This role is responsible for managing the full Governance, Risk, and Compliance (GRC) lifecycle, ensuring that all cybersecurity controls are measurable, defensible, and aligned with regulatory expectations.</p> <h3 >Key Responsibilities</h3> <ul > <li ><strong >Regulatory Compliance &amp; Audit Readiness:</strong> Maintain and manage the compliance tracker across SAMA CSF, PDPL/NDMO, and PCI-DSS. This includes owning the full evidence lifecycle (collection, validation, documentation), ensuring continuous audit readiness, tracking regulatory findings and remediation plans, and providing regular compliance status reports to the CISO and relevant committees.</li> <li ><strong >Governance &amp; Policy Management:</strong> Develop and maintain cybersecurity policies, standards, and procedures. Ensure documentation aligns with SiFi governance structure and regulatory expectations, manage the document lifecycle (versioning, approvals, reviews), and map all policies and procedures to SAMA CSF controls.</li> <li ><strong >Cyber Risk Management:</strong> Maintain and update the cybersecurity risk register. Conduct third-party risk assessments (TPRA) and vendor due diligence. Support risk reviews and reporting cycles, and collaborate with Risk and Compliance teams to align enterprise risk frameworks.</li> <li ><strong >KPI / KRI Monitoring &amp; Reporting:</strong> Collect and validate cybersecurity KPIs/KRIs from relevant stakeholders. Maintain a centralized KPI/KRI tracker, prepare periodic reports with trend analysis to support regulatory maturity (Level 3+), and identify and escalate performance gaps.</li> </ul> <h3 >Core Competencies and Experience</h3> <p >The ideal candidate will have 2-5 years of experience in cybersecurity GRC. Demonstrated proficiency in maintaining compliance trackers, managing evidence lifecycles, and ensuring audit readiness across frameworks like SAMA CSF, PDPL/NDMO, and PCI-DSS is required. Experience in developing cybersecurity policies, managing risk registers, conducting third-party risk assessments, and reporting on KPIs/KRIs is also essential.</p> <h3 >Preferred Qualifications</h3> <ul > <li >Experience with PDPL and NDMO regulations.</li> <li >PCI-DSS compliance exposure.</li> <li >Knowledge of cloud security (AWS, Azure, GCP, OCI).</li> <li >Experience in fintech or financial services.</li> <li >Familiarity with frameworks like ISO 27001, NIST, COBIT.</li> </ul> <h3 >Work Location and Type</h3> <p >This is a full-time position based in Riyadh, Ar Riyad. The role operates within a dynamic FinTech environment, contributing to the company's robust cybersecurity posture.</p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <ul><li>Monitoring systems and networks to identify security threats and vulnerabilities.</li><li>Protecting systems and data from breaches and cyber attacks.</li><li>Tracking and analyzing security incidents and taking appropriate measures to address them.</li><li>Conducting regular security vulnerability assessments and assisting in their remediation.</li><li>Implementing and monitoring cybersecurity policies and procedures.</li><li>Monitoring system logs and security alerts and analyzing them.</li><li>Contributing to raising security awareness among employees.</li><li>Preparing reports related to security incidents and risks.</li><li>Collaborating with IT teams to ensure the implementation of best cybersecurity practices.</li></ul><p><br></p> </div><h2 class="h5">Skills</h2> <div data-jb-field="skills"><ul><li>Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.</li><li>Practical experience in cybersecurity or information security.</li><li>Good knowledge of network security concepts and operating systems.</li><li>Familiarity with security protection and monitoring tools and techniques such as <b>Firewall, VPN, SIEM, IDS/IPS</b>.</li><li>Ability to analyze security threats and vulnerabilities and respond accordingly.</li><li>Preferred certifications such as <b>Security+ or CEH or CISSP</b> based on experience level.</li><li>Proficiency in English.</li></ul><p><br></p></div>

<p > </p> <table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0"> <tbody> <tr > <td colspan="6" valign="top"> <p ><strong><span >Job Description </span></strong></p> </td> </tr> <tr > <td colspan="6" valign="top"> <p ><strong><span >OVERVIEW</span></strong></p> </td> </tr> <tr > <td valign="top"> <p ><strong><span >Job Title</span></strong></p> </td> <td valign="top"> <p ><span >Consultant</span></p> </td> <td valign="top"> <p ><strong><span >Job Code</span></strong></p> </td> <td valign="top"> <p ><span >680865</span></p> </td> <td valign="top"> <p ><strong><span >Grade</span></strong></p> </td> <td valign="top"> <p ><span >I3</span></p> </td> </tr> <tr > <td valign="top"> <p ><strong><span >Group</span></strong></p> </td> <td valign="top"> <p ><em><span dir="RTL" >-</span></em></p> </td> <td valign="top"> <p ><strong><span >Division</span></strong></p> </td> <td colspan="3" valign="top"> <p ><span >Legal, Risk &amp; Governance</span></p> </td> </tr> <tr > <td valign="top"> <p ><strong><span >Department</span></strong></p> </td> <td valign="top"> <p ><span >Cybersecurity</span></p> </td> <td valign="top"> <p ><strong><span >Unit</span></strong></p> </td> <td colspan="3" valign="top"> <p ><span >Application Security</span></p> </td> </tr> </tbody> </table> <p ><span > </span></p> <table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0"> <tbody> <tr> <td valign="top"> <p ><strong><span >ROLE PURPOSE</span></strong></p> <p ><em><span >The aim is to state the overall significance of the job from the organization’s perspective.</span></em></p> </td> </tr> <tr > <td valign="top"> <p ><span >The role exists to perform application security assessments and support the integration of security throughout the software development lifecycle by identifying application vulnerabilities, conducting code and design reviews, assessing APIs and integrations, and providing security guidance to development teams to strengthen the security of Elm's applications and digital solutions.</span></p> </td> </tr> </tbody> </table> <p > </p> <table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0"> <tbody> <tr > <td colspan="2" valign="top"> <p ><strong><span >KEY ACCOUNTABILITIES &amp; ACTIVITIES</span></strong></p> <p ><em><span >This section describes <u>the principal outputs</u> required from the job.</span></em></p> </td> </tr> <tr > <td > <p ><strong><span >Key Accountabilities</span></strong></p> </td> <td > <p ><strong><span >Key Activities</span></strong></p> </td> </tr> <tr > <td > <ol > <li ><span >Application Security Assessment</span></li> </ol> </td> <td > <ul > <li ><span >Perform security assessments for applications and digital solutions.</span></li> <li ><span >Evaluate applications against approved security requirements and standards.</span></li> <li ><span >Document identified vulnerabilities, risks, and recommended remediation actions.</span></li> </ul> </td> </tr> <tr > <td > <ol start="2"> <li ><span >Secure Code Review</span></li> </ol> </td> <td > <ul > <li ><span >Conduct security-focused source code reviews to identify vulnerabilities and insecure coding practices.</span></li> <li ><span >Assess code against secure coding standards and common application security risks.</span></li> <li ><span >Provide remediation guidance to development teams.</span></li> </ul> </td> </tr> <tr > <td > <ol start="3"> <li ><span >Threat Modeling</span></li> </ol> </td> <td > <ul > <li ><span >Conduct threat modeling for new and existing applications and services.</span></li> <li ><span >Identify potential attack scenarios, threats, and security control gaps.</span></li> <li ><span >Recommend security controls based on identified risks.</span></li> </ul> </td> </tr> <tr > <td > <ol start="4"> <li ><span >Application Vulnerability Management</span></li> </ol> </td> <td > <ul > <li ><span >Identify, analyze, and assess application-layer vulnerabilities.</span></li> <li ><span >Coordinate with development teams on vulnerability remediation activities.</span></li> <li ><span >Validate remediation and monitor outstanding application security findings.</span></li> </ul> </td> </tr> <tr > <td > <ol start="5"> <li ><span >API &amp; Integration Security</span></li> </ol> </td> <td > <ul > <li ><span >Assess APIs, microservices, and third-party integrations for cybersecurity risks.</span></li> <li ><span >Evaluate authentication, authorization, data protection, and integration controls.</span></li> <li ><span >Recommend appropriate security improvements.</span></li> </ul> </td> </tr> <tr > <td > <ol start="6"> <li ><span >Secure Design &amp; Development Advisory</span></li> </ol> </td> <td > <ul > <li ><span >Provide security guidance to development and engineering teams throughout the development lifecycle.</span></li> <li ><span >Support the application of secure design and development practices.</span></li> <li ><span >Recommend security controls appropriate to solution risks and requirements.</span></li> </ul> </td> </tr> <tr > <td > <ol start="7"> <li ><span >Application Security Standards &amp; Frameworks</span></li> </ol> </td> <td > <ul > <li ><span >Develop and maintain application security standards, guidelines, and technical requirements.</span></li> <li ><span >Support alignment with secure software development practices and applicable cybersecurity standards.</span></li> <li ><span >Evaluate emerging application security practices and recommend enhancements.</span></li> </ul> </td> </tr> <tr > <td > <ol start="8"> <li ><span >Developer Security Awareness</span></li> </ol> </td> <td > <ul > <li ><span >Support secure coding awareness and technical security training for developers.</span></li> <li ><span >Develop security guidance and knowledge materials addressing common application vulnerabilities.</span></li> <li ><span >Promote secure development practices across engineering teams.</span></li> </ul> </td> </tr> <tr > <td > <ol start="9"> <li ><span >Policies, Processes &amp; Procedures</span></li> </ol> </td> <td > <ul > <li ><span >Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.</span></li> <li ><span >Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.</span></li> </ul> </td> </tr> <tr > <td > <ol start="10"> <li ><span >Information Security</span></li> </ol> </td> <td > <ul > <li ><span >Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.</span></li> </ul> </td> </tr> </tbody> </table> <p > </p> <p > </p> <table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0"> <tbody> <tr> <td colspan="2" valign="top"> <p ><strong><span >JOB SPECIFICATIONS</span></strong></p> </td> </tr> <tr> <td valign="top"> <p ><strong><span >Academic and professional qualifications</span></strong></p> </td> <td > <ul > <li ><span >Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, Computer Engineering, or a related field.</span></li> <li ><span >Professional certifications in Application Security, Secure Software Development, or related cybersecurity disciplines are considered an advantage.</span></li> </ul> </td> </tr> <tr> <td valign="top"> <p ><strong><span >Years and Nature of Experience</span></strong></p> </td> <td > <ul > <li ><span >4–6 years of experience in application security, secure software development, security assessments, vulnerability management, or related cybersecurity domains.</span></li> </ul> </td> </tr> </tbody> </table> <p > </p> <p > </p> </span>

Security Architecture Analyst(Secure‑by‑Design • Cloud Security • Enterprise Architecture)<br>we are seeking an experienced Security Architecture Analyst to join their cybersecurity and enterprise architecture function in Riyadh. This is a fully on‑site role supporting secure‑by‑design governance across cloud and on‑prem environments.<br>Role Summary The Security Architecture Analyst will ensure that all technology projects and platforms follow approved security architecture standards, secure‑by‑design principles, and regulatory requirements. The role requires deep expertise in cloud security patterns, secure design reviews, and enterprise‑grade architecture governance.<br>Key Responsibilities Security Architecture Reviews - Conduct security architecture assessments for new projects, major changes, and cloud deployments (OCI, microservices, APIs, data platforms). Secure Design Patterns - Develop and maintain enterprise security design patterns and reference architectures covering network segmentation, IAM, encryption, API security, and data protection. Cloud Security Architecture - Define secure configurations for OCI services, including identity models, network security groups, encryption, and key management. Dev Sec Ops Integration - Embed security controls into CI/CD pipelines (SAST, dependency scanning, container security, IaC validation). Technology Evaluation - Support evaluation and selection of security technologies and ensure architectural alignment. Cross‑Functional Collaboration - Work with SOC, GRC, and Enterprise Architecture teams to ensure monitoring and governance requirements are built into solution designs. Architecture Governance - Participate in architecture review boards and document decisions, risks, and required design adjustments. Documentation & Reporting - Produce high‑quality architecture review reports, diagrams, and design rationales.<br>Minimum Experience & Qualifications7+ years of experience in security architecture, secure‑by‑design reviews, and enterprise security frameworks. Strong expertise in cloud security (preferably OCI), microservices, API security, and data protection. Deep knowledge of network segmentation, IAM, encryption, and secure third‑party integration. Experience integrating security into Dev Ops/CI‑CD pipelines. Strong documentation and architectural governance discipline. Preferred Certifications Cloud security certifications (OCI, AWS, Azure) SABSA, TOGAF, CCSK, CCSP, or equivalent architecture/security certifications<br>Work Model???? On‑site in Riyadh Due to the sensitivity of architecture governance and secure‑by‑design processes, this role requires full on‑site presence

Security Architecture Analyst(Secure‑by‑Design • Cloud Security • Enterprise Architecture)<br>we are seeking an experienced Security Architecture Analyst to join their cybersecurity and enterprise architecture function in Riyadh. This is a fully on‑site role supporting secure‑by‑design governance across cloud and on‑prem environments.<br>Role Summary The Security Architecture Analyst will ensure that all technology projects and platforms follow approved security architecture standards, secure‑by‑design principles, and regulatory requirements. The role requires deep expertise in cloud security patterns, secure design reviews, and enterprise‑grade architecture governance.<br>Key Responsibilities Security Architecture Reviews - Conduct security architecture assessments for new projects, major changes, and cloud deployments (OCI, microservices, APIs, data platforms). Secure Design Patterns - Develop and maintain enterprise security design patterns and reference architectures covering network segmentation, IAM, encryption, API security, and data protection. Cloud Security Architecture - Define secure configurations for OCI services, including identity models, network security groups, encryption, and key management. Dev Sec Ops Integration - Embed security controls into CI/CD pipelines (SAST, dependency scanning, container security, IaC validation). Technology Evaluation - Support evaluation and selection of security technologies and ensure architectural alignment. Cross‑Functional Collaboration - Work with SOC, GRC, and Enterprise Architecture teams to ensure monitoring and governance requirements are built into solution designs. Architecture Governance - Participate in architecture review boards and document decisions, risks, and required design adjustments. Documentation & Reporting - Produce high‑quality architecture review reports, diagrams, and design rationales.<br>Minimum Experience & Qualifications7+ years of experience in security architecture, secure‑by‑design reviews, and enterprise security frameworks. Strong expertise in cloud security (preferably OCI), microservices, API security, and data protection. Deep knowledge of network segmentation, IAM, encryption, and secure third‑party integration. Experience integrating security into Dev Ops/CI‑CD pipelines. Strong documentation and architectural governance discipline. Preferred Certifications Cloud security certifications (OCI, AWS, Azure) SABSA, TOGAF, CCSK, CCSP, or equivalent architecture/security certifications<br>Work Model???? On‑site in Riyadh Due to the sensitivity of architecture governance and secure‑by‑design processes, this role requires full on‑site presence

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Cybersecurity Operations Expert responsible for supporting the first line of defense through the day-to-day execution, monitoring, and improvement of operational security controls across enterprise IT environments.<br> The role focuses on protecting systems, networks, endpoints, applications, and users by detecting threats, responding to security events, coordinating remediation activities, and maintaining effective cybersecurity operations.<br> Key responsibilities include continuous monitoring of security alerts and events, email security, and other operational security platforms, and ensuring timely containment and recovery actions.<br> The role also supports vulnerability management by tracking findings, coordinating remediation with infrastructure and application teams, and validating closure of identified risks.<br> The Cybersecurity Operations Expert works closely with IT operations, network, cloud, server, endpoint, and application teams to ensure security controls are implemented and functioning effectively as part of daily business and technology operations.<br> Responsibilities also include supporting identity and access security operations, reviewing privileged access activities, enforcing security baselines, maintaining playbooks and operational procedures, and contributing to security awareness from an operational perspective.<br> This position is part of the first line of defense and is therefore focused on operating and executing controls rather than performing independent oversight, policy governance, regulatory compliance assurance, or internal audit activities associated with the second or third lines of defense.<br> Rsponsibilities: Monitor and analyze cybersecurity alerts, events, and incidents.<br> Perform initial triage, investigation, containment support, and escalation of security incidents.<br> Support endpoint, network, cloud, and email security operations.<br> Coordinate vulnerability remediation with relevant technical teams.<br> Execute and maintain operational security controls and monitoring use cases.<br> Monitor and support security-related patching, platform upgrades, and operational technology refresh activities to ensure minimal security exposure and service disruption.<br> Support security activities during system, tool, and infrastructure migrations, including validation of controls, configuration reviews, and post-migration security checks.<br> Review and validate security integrations between cybersecurity tools, IT systems, cloud platforms, and third-party solutions to ensure proper logging, alerting, connectivity, and control effectiveness.<br> Support access control reviews, privileged access monitoring, and identity-related security operations.<br> Maintain incident response procedures, runbooks, and operational documentation.<br> Track remediation actions and follow up on risk reduction activities.<br> Contribute to continuous improvement of cybersecurity activities and processes.<br> Support business resilience by reducing operational cyber risk exposure.<br> Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field.<br> 5+ years of experience in cybersecurity operations, security monitoring, incident response, vulnerability management, or security engineering functions.<br> Hands-on experience with enterprise security technologies, including SIEM, EDR/XDR, email security, identity and access management, network security, cloud security, and vulnerability management platforms.<br> Strong understanding of cybersecurity frameworks, attack techniques, threat detection methodologies, and security operations best practices.<br> Experience working in hybrid environments spanning on-premises infrastructure, cloud platforms, and third-party services.<br> Preferred Certifications Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM)</span> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> No experience required </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Job Description: The IT Security Engineer supports the implementation of security standards, monitoring activities, and basic compliance requirements to help protect IT systems, applications, and data.<br> This role is suitable for a fresh graduate who will learn and assist in security awareness, code scanning before deployments, vulnerability follow-up, and applying Saudi cybersecurity regulations under the guidance of senior IT team members.<br> Responsibilities: Security Governance &amp; Compliance Support: Assist in implementing IT security standards and internal security policies.<br> Support compliance activities related to Saudi cybersecurity regulations and internal requirements.<br> Help maintain security documentation, checklists, and basic audit evidence.<br> Coordinate with senior team members to follow up on required security actions.<br> Threat &amp; Vulnerability Management: Monitor security alerts and escalate suspicious activities to senior IT team members.<br> Assist in vulnerability scanning and follow up on remediation status.<br> Support patching and corrective actions by tracking findings and sharing updates.<br> Maintain security incident logs and coordinate with relevant teams for incident resolution.<br> Application &amp; Infrastructure Security: Secure all application and infrastructure layers, including web, backend, APIs, databases, and client applications.<br> Perform basic code security scanning before deployments and report identified risks.<br> Implement access control, authentication, encryption, and secure configurations.<br> Collaborate with DevOps and Infra teams to ensure secure deployment of pipelines.<br> Knowledge Management &amp; Training: Develop security guidelines, SOPs, and documentation.<br> Conduct training sessions and workshops to raise awareness among internal users and technical teams.<br> Promote a security-conscious culture across the organization.<br> Collaboration &amp; Technical Delivery: Work closely with Infra, DevOps, and Development teams for secure architecture and operations.<br> Review and approve security measures for new tools, applications, and integrations.<br> Advice on security requirements for new projects, features, or customer integrations.<br> Job Relations: Reports to: IT Infrastructure Lead / IT Manager.<br> Internal Relations: DevOps Engineer, Infra Engineer, QA, Development Teams, IT Support.<br> External Communications: Communicate with regulators and auditors to ensure compliance and provide reports.<br> Liaise with external vendors for security assessments, penetration tests, and certifications.<br> Escalate critical security risks to IT leadership and management.<br> Bachelor’s degree in Computer Engineering, Computer Science, Cybersecurity, Information Technology, or related field.<br> Fresh graduate or up to 2 years of experience in Information Security, Cybersecurity, or IT.<br> Relevant cybersecurity certifications or training, such as CompTIA Security+, CEH, ISO 27001 Foundation, or equivalent certifications .<br> Basic understanding of security governance, risk management, and compliance concepts.<br> Knowledge of: Network and infrastructure security (Firewalls, VPNs, IDS/IPS).<br> Application security (Web, APIs, Mobile Applications).<br> Security monitoring and SIEM platforms.<br> Backup, Disaster Recovery (DR), and Business Continuity concepts.<br> Secure Software Development Lifecycle (SSDLC).<br> Security code scanning and vulnerability management.<br> Saudi cybersecurity regulations and frameworks (NCA ECC, PDPL, ISO 27001) awareness is preferred.<br> Competencies: Willingness to learn and develop technical security skills.<br> Risk-aware mindset with attention to detail.<br> Basic ability to understand security standards and translate them into daily operational tasks.<br> Collaboration and influence across technical and non-technical teams.<br> Proactive attitude toward security awareness, documentation, and continuous improvement.<br> Skills &amp; Languages: Vulnerability management, penetration testing, and threat intelligence Security monitoring and SIEM tools Network security, firewalls, VPNs, encryption, IAM Application security best practices.<br> Backup, disaster recovery, and business continuity planning Fluent in English (required).<br> Arabic proficiency (preferred).<br></span> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> No experience required </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

Security Expert <br>Experience: 10 Years Location: Saudi Arabia ( On-Site )<br>Job Description<br>We are looking for an experienced Security Expert with strong expertise in security requirement assessment, Role-Based Access Control (RBAC), authorization design, and access governance.<br>Key Responsibilities<br>Assess security requirements across all in-scope work packages. Design and implement RBAC, roles, and authorization structures. Define secure access models aligned with business and enterprise security standards. Support access provisioning, security testing, compliance, and audit requirements. Identify security risks and recommend appropriate controls. Collaborate with business, functional, and technical teams on security design and implementation.<br>Mandatory Skills<br>Strong hands-on experience in Security Architecture / Security Design. Strong expertise in RBAC, Role Design, Authorization, and Access Control. Experience in IAM, Access Governance, and security requirement assessment. Good understanding of SoD, security compliance, and risk management. Excellent communication and stakeholder management skills.