Senior Information Security Specialist

About the role

The Senior Information Security Specialist will lead the design, implementation and governance of security controls across KAUST's IT environment. This senior position requires deep expertise in information security standards and hands‑on experience protecting critical data and systems.

Key responsibilities

• Develop, implement and maintain security policies, standards and procedures for data, system and application protection.
• Manage incident response, security awareness, operations, maintenance and procurement activities.
• Classify information assets, define sensitivity levels and enforce need‑to‑know requirements.
• Conduct security risk assessments, vulnerability assessments and business impact analyses for medium‑complexity systems.
• Ensure compliance with ISO 27000 series, NIST and COBIT frameworks.

Required profile

• Bachelor’s degree in Computer Science, Network Engineering, Information Security or related field.
• Minimum 15 years of IT experience with 4‑6 years focused on information security and network security.
• Proven experience in server and network management; management experience is a plus.
• Relevant certifications such as Certified Ethical Hacker (CEH) or equivalent.

Required skills

• ISO 27001/27000 series knowledge.
• NIST security framework expertise.
• COBIT governance familiarity.
• Certified Ethical Hacker (CEH) certification.
• Security risk assessment and vulnerability assessment techniques.
• Network security and server management.