Cloud Security & Encryption Specialist

About the role

CCDS is hiring a Cloud Security & Encryption Specialist for an on-site position in Riyadh, Saudi Arabia. This is a project-based engagement providing managed cybersecurity services for 13 months, requiring at least 8 years of relevant experience. The role governs and improves the security posture of cloud environments and encryption controls, ensuring secure storage, processing, transmission and monitoring of entity data.

Key responsibilities

• Monitor cloud environments for compliance with approved security policies, standards and architecture requirements.
• Review the security posture of compute, storage, database, platform and supporting cloud services.
• Monitor cloud-security tools and dashboards, investigate suspicious activity and coordinate responses with cybersecurity teams.
• Review CSPM findings, misconfigurations, exposed services, policy violations and unauthorized deployments or Shadow IT, and assess third-party cloud services and integrations.
• Track remediation of cloud-security findings through closure.
• Define and review encryption requirements for sensitive data at rest, in transit and during processing.
• Support governance of cryptographic controls, keys, certificates and secure integrations in line with Ministry requirements.
• Maintain cloud asset visibility, operational reports, risk status and remediation accountability.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field.
• At least 8 years of relevant cloud security, security architecture or encryption experience.
• Strong risk judgment, ownership of remediation follow-through, and excellent analytical, troubleshooting and cross-functional coordination skills.
• Clear technical documentation and stakeholder communication; proactive and detail-oriented.
• Comfortable working across cloud, infrastructure, SOC, IAM and architecture teams.

Required skills

• Hands-on experience with CSPM and cloud-native security monitoring tools.
• Data encryption at rest and in transit, cryptographic controls, key and certificate management, and secure cloud architecture.
• NCA requirements, Zero Trust, least privilege and cloud risk-management practices.
• Preferred certifications: CCSP, CISSP, SABSA, TOGAF, GIAC GCSA or equivalent; a major cloud-platform security certification is also highly relevant.

Candidates should state their nationality, years of experience, current location, notice period and valid certifications in their application; shortlisted candidates may be asked for supporting documents and to take part in technical interviews.