Senior IT Security Specialist

About the role

The Senior IT Security Specialist is responsible for implementing, administering, and maintaining enterprise security technologies to protect the confidentiality, integrity, and availability of information systems and data. The role works closely with infrastructure, network, cloud, application, service desk, cybersecurity, and audit teams to enhance the organization’s cyber‑resilience.

Key responsibilities

• Develop and maintain security reference architectures aligned with ISO/IEC 27001, NIST SP 800-53, COBIT 2019 and Saudi regulations (NCA ECC, OTCC).
• Implement, administer and support endpoint protection (EDR), next‑generation firewalls, IDS/IPS, anti‑malware, email/web security gateways, DLP, vulnerability scanners and SIEM solutions.
• Monitor security alerts, perform triage, investigation, escalation and remediation of threats and incidents.
• Lead incident response and forensic investigations, including containment, eradication, recovery and root‑cause analysis.
• Conduct risk assessments, vulnerability scans and configuration reviews across on‑premise and cloud environments, tracking findings to closure.
• Apply security baselines, hardening and patch‑management policies using CIS Benchmarks.
• Administer identity and access governance, privileged access management (PAM) and periodic user access reviews.
• Develop, enforce and maintain security policies, standards and procedures, and support internal and external audits.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• Minimum 6 years of progressive experience in IT security, including security operations, SIEM monitoring, incident response and vulnerability management.
• Experience in an industrial or manufacturing (OT/IT) environment and familiarity with ISO 27001 and Saudi NCA compliance is preferred.

Required skills

• Endpoint Detection & Response (EDR) solutions.
• Next‑Generation Firewalls (NGFW) and IDS/IPS.
• Anti‑malware, Email and Web security gateways.
• Data Loss Prevention (DLP) technologies.
• Vulnerability scanning tools.
• Security Information and Event Management (SIEM) platforms.
• CIS Benchmarks for system hardening.
• Privileged Access Management (PAM) and Identity Access Governance.