Information Security Officer

About the Role

Kingdom Cyber Defence, a leading cybersecurity organization based in Riyadh, Saudi Arabia, is seeking a highly motivated and skilled Information Security Officer to join our dynamic team. In this critical role, you will play a pivotal part in safeguarding our organization’s information systems, networks, and digital assets against evolving cyber threats. Your responsibilities will encompass the development and implementation of robust security policies, continuous monitoring of cyber risks, ensuring regulatory compliance, and fostering a culture of cybersecurity awareness throughout the organization. This position offers a unique opportunity to contribute to the security posture of a forward-thinking enterprise while working in a collaborative and innovative environment.

Key Responsibilities

The Information Security Officer will be responsible for a wide range of duties, including but not limited to:

• Policy Development and Implementation: Design, develop, implement, and maintain comprehensive information security policies, standards, and procedures to align with organizational goals and regulatory requirements.
• Threat Monitoring and Incident Response: Proactively monitor networks, systems, and applications for security threats and vulnerabilities. Conduct thorough investigations into security incidents, lead incident response efforts, and recommend corrective actions to mitigate risks and prevent future occurrences.
• Risk Assessment and Compliance: Perform regular risk assessments, security audits, and compliance reviews to identify gaps and ensure adherence to cybersecurity frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and SOC 2. Stay abreast of evolving regulatory requirements and industry best practices.
• Access Control Management: Oversee identity and access management processes to ensure secure and appropriate access to organizational resources, minimizing the risk of unauthorized access or data breaches.
• Collaboration with IT Teams: Work closely with IT departments to implement and maintain security controls across infrastructure, cloud environments (AWS, Microsoft Azure, or Google Cloud Platform), and applications. Conduct vulnerability assessments and coordinate remediation efforts to enhance the organization’s security posture.
• Security Awareness and Training: Develop and deliver engaging security awareness training programs to educate employees on cybersecurity best practices, fostering a culture of security mindfulness across the organization.
• Reporting and Recommendations: Prepare detailed security reports, risk assessments, and actionable recommendations for senior management to support informed decision-making and strategic planning.

Qualifications and Skills

To excel in this role, candidates must meet the following requirements:

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field from an accredited institution.
• Experience: Minimum of five years of progressive experience in information security, cybersecurity, IT risk management, or a closely related discipline, with a proven track record of implementing effective security measures.
• Technical Proficiency: In-depth knowledge of network security principles, endpoint protection mechanisms, firewalls, intrusion detection/prevention systems (IDS/IPS), and security monitoring tools. Hands-on experience with SIEM platforms, vulnerability management tools, and incident response processes is essential.
• Cloud Security Expertise: Familiarity with cloud security best practices and experience securing environments across major cloud platforms, including AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Regulatory Knowledge: Strong understanding of cybersecurity frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and SOC 2, with the ability to apply these frameworks to organizational security strategies.
• Soft Skills: Exceptional analytical, problem-solving, communication, and documentation skills. Ability to manage multiple priorities in a fast-paced environment while maintaining a strong security posture and collaborating effectively with cross-functional teams.
• Certifications: Professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CompTIA Security+, CEH (Certified Ethical Hacker), or ISO 27001 Lead Implementer are highly advantageous and preferred.

Kingdom Cyber Defence is committed to fostering a diverse, inclusive, and innovative workplace. We offer a competitive salary of SAR 24,500 per month, along with opportunities for professional growth and development in a cutting-edge cybersecurity environment. If you are passionate about information security and eager to make a meaningful impact, we invite you to apply and become a part of our mission to protect and secure digital assets in the Kingdom of Saudi Arabia.