Talent.com
This job offer is not available in your country.
Principal Specialist, Cybersecurity Operations

Principal Specialist, Cybersecurity Operations

Ma’adenRiyadh, Riyadh Region, Saudi Arabia
4 days ago
Job description

Overview

Position Title : Manager : Cyber Security Operations

Broad Band : M12 : Management

Reports to : Director : Cyber Security

Department & Function : Ma’aden Cyber Security

Talent Pipeline Layer : Managing Others (MO)

Overall Job Purpose

Manager : Cyber Security Operations is responsible for performing the daily monitoring, maintenance and improvements to the security solutions deployed across Ma’aden on the perimeter, infrastructure, network-level, system-level and database-level to monitor and protect MA’ADEN Corporate and Affiliates IT (Information Technology) and OT (Operational Technology) resources and assets within Saudi Arabia, India, Malawi, Zimbabwe, Mozambique, South Africa and Mauritius. This position works closely with other functions to assist in the security monitoring program, managing the Security Operations Center (SOC) for Ma\'aden within the seven countries, maintaining cyber threat situational awareness of internal and external threats and vulnerabilities through enhanced monitoring capabilities and oversight of systems and processes used to assess security. Handle threat intelligence through strong partnerships and communications with regulatory agencies, Cybersecurity providers, national and global peers. This position is also responsible for catering to all access management requests and changes as well as the incident response against in Cyber attack / breach and recovery capability. It is also responsible of handeling forensic invistigations and Root Cause Analysis (RCA) activites.

Qualifications, Experience & Skills

Qualification :

  • Bachelor degree in Computer Science or Computer Engineering with an advanced degree desirable

Experience :

  • At least 8-10 Years' relevant experience
  • Skills :

  • Mixed managerial, analytical and technical skills, and knowledge in all aspects of Cyber security in multi IT / OT domains : database, development, network operations, Data Centers, operating systems, Security Operations Centers (SOC), security technologies, specific applications security, etc.
  • Good knowledge in business continuity planning and disaster recovery management.
  • Good understanding of cyber security standards (ISO27001, ISO 22301, ISO 9001, NIST).
  • Certifications in information security field (e.g. CISM / CISSP / ISO 27001 / ISMS Lead Auditor )
  • Good understanding of IT service management practices
  • Certifications in ITIL is a plus
  • Key Accountabilities

  • Cyber Security Operations Management
  • Oversee and direct Cyber security activities to execute the Cyber security program at all MAADEN including Corporate and Affiliates within Saudi Arabia, India, Malawi, Zimbabwe, Mozambique, South Africa and Mauritius

  • Ensure that the rules of use for IT / OT systems and the administrative procedures for IT / OT systems comply with the MA’ADEN’s Cyber security policies.
  • Ensure that services provided by business and other enterprises, including outsourced providers are consistent with established Cyber security policies
  • Perform daily monitoring, maintenance and improvements as needed to the security solutions deployed across Ma’aden on the perimeter, infrastructure, network-level, system-level and database-level
  • Maintain cyber threat situational awareness of internal and external threats and vulnerabilities through enhanced monitoring capabilities and oversight of systems and processes used to assess security
  • Monitor users, applications, networks, systems, and access to physical assets
  • Perform periodic review of audits logs (includes review and retention) of applications, networks, systems, and access to physical assets
  • Perform periodic user access review across Ma’aden’s registered users
  • Conduct physical and logical security control assessments (vulnerability assessment), security monitoring, detection, and security status reporting to enable informed decisions
  • Scans, analyzes, and apply countermeasures of vulnerabilities
  • Detects, analyzes, and eliminates viruses and malicious code
  • Incident Response Management
  • Establish and manage capability to respond to and recover from disruptive and destructive Cyber systems incidnets

  • Design and implement processes for detecting, identifying and analyzing security related events
  • Develop incident handling recovery plans including organizing, training, and equipping teams
  • Ensure periodic testing of the response scenarios and recovery plans where appropriate
  • Business Continuity and Disaster Recovery Plan Management
  • Execute, coordinate, maintain and supervise comprehensive Business Continuity and Disaster Recovery Programs, strategies, plans and procedures within the seven countries

  • Coordinate and manage activities related to the Business Continuity Plan (BCP) including the Disaster Recovery Plan (DRP)
  • Coordinate the maintenance of the BCP / DRP documentation
  • Primary liaison between key stakeholders of MA’ADEN’s BCP e.g. Senior Management, Directors and Managers, Staff, Consultants, vendors and auditors
  • Cyber Security Compliance
  • Implement and comply with Cyber Security policies and procedures in the manufacturing environment

  • Participate and contribute in the early stages of design for manufacturing technologies and systems to ensure alignment with Cyber Security requirements and standards
  • Build the Cyber Security standards in terms of manufacturing and operational technologies in cooperation with Enterprise Cyber Security team and Process controls owners in Ma’aden affiliates.
  • Participate in auditing activities to ensure security policies, requirements and best practices are effectively applied
  • Leadership

  • Performance Management & Capability Building
  • Lead the MA’ADEN Corporate and Affiliates IT / OT security team : plan, organize, assign, supervise and monitor the work of team members

  • Review overall KPIs, performance and cyber security measures for all Ma’aden IT and OT networks.
  • Reports Cyber security related performance KPIs.
  • Conduct periodic performance reviews of the staff.
  • Building required capabilities and competencies within Cyber security staff.
  • Planning & Budgeting
  • Develop the 5 years business plan a budget for Cybersecurity Operations function.

  • Establish and maintain plans to implement the Cyber security operations projects.
  • Define annual Cyber security budget and obtain management approval.
  • Manage the Cyber security budget in implementing the Cyber security program.
  • Prepare the budget for cyber security Operations requirements
  • Relationships

  • ICT-SS
  • Align and build the relationship with ICT functions to ensure proper implementation of Cybersecurity technologies and practices within IT environments across Ma'aden covering but not limited to : aligning the Cybersecurity operations plans and objectives, implement Cybersecurity tools and technologies on top of the ICT infrastructure and applications, develop the incident response & recovery capability for ICT, collaborate with IT to support security projects and ensure proper security controls are considered.

  • Cyber Security Collaborate with the other cybersecurity functions to ensure adequate planning and Aligning of Cybersecurity strategy and plans.
  • Internal / External Audit Align with Internal / External Audits on the approved frameworks, policies and procedures implemented in Cybersecurity for IT and OT, support the audit functions in conducting continuous audits on the security controls implemented in IT and OT and manage the closure of the reported audit observations. Provide adequate responses and evidences to support the audit closures, support Ma'aden Corporate and affiliates in the seven countries to address and close any Cybersecurity related observations.
  • Ma’aden affiliates Align and build the relationship with the several business functions in Ma'aden to ensure proper implementation of Cybersecurity controls within in the seven countries covering : aligning the Cybersecurity strategy, objectives and business plan with the Affiliates business strategies, ensure Cybersecurity framework and policies embedded part of the Affiliates models, conduct periodical risk assessment on operational processes and OT infrastructure and confirm the level of compliance against the Cybersecurity controls, support OT projects by reviewing security architecture and ensure proper security controls are considered.
  • Operational Technology (OT) and Industrial Control Systems (ICS) Stakeholders in Ma'aden Support and provide the OT and ICS functions in across Ma'aden with required guidelines, policies, procedures, security architecture and controls. conduct periodical risk assessments to confirm the level of maturity and compliance of OT security controls.
  • Security Service providers Select and work with the potential security vendors that can provide required consultancy services. Support and maintain strong relationship with the vendors to ensure sustainable and efficient support level.
  • Business Continuity and Crisis Management Primary liaison between key stakeholders of MA’ADEN’s BC plan e.g. Senior Management, Directors and Managers, Staff, Consultants, vendors and auditors in the seven countries
  • Government Authorities Align and build strong relationship with relevant Government authorities in Saudi Arabia, India, Malawi, Zimbabwe, Mozambique, South Africa and Mauritius (i.e. National Cybersecurity Authority in Saudi Arabia) to ensure proper adherence and compliance to mandates and regulations as well as report and escalate any Cyber threats targetting Ma'aden Corporate and affilaites where ever applicable and work with the authorities to secure the company and recover the impacts.
  • 5. COMPETENCIES :

    Technical / Functional

  • Cyber Security Risk Management
  • Enterprise Architecture
  • IT / Solution Architecture
  • Security Architecture Controls Implementation
  • Cloud Security
  • Product / Vendor Security Certifications
  • Security Tecnologies
  • Project Management
  • Presentation Skills
  • Leadership

  • Leadership
  • Teamwork
  • Integrity
  • Care
  • Ownership
  • Accountability
  • Communication
  • Time Management, Planning and Organization
  • Safety

  • Safety advocate - anywhere and everywhere
  • Expert knowledge and application of HSE rules and procedures
  • Advanced knowledge of applicable HSE legislation and regulations and its practical implications
  • Concern for employees' wellbeing
  • Ability to foster a safety culture
  • Drive and facilitate Ma\'aden Safety Culture Transformation Program
  • #J-18808-Ljbffr

    Create a job alert for this search

    Cybersecurity Specialist • Riyadh, Riyadh Region, Saudi Arabia

    Related jobs
    • Promoted
    Cybersecurity Excellence Specialist

    Cybersecurity Excellence Specialist

    SalamRiyadh, Riyadh Region, Saudi Arabia
    Job Role : The Cybersecurity Excellence Quality Analyst ensures the highest quality standards across our Cybersecurity services and initiatives. This role oversees the performance of Cybersecurity se...Show moreLast updated: 10 days ago
    • Promoted
    OT / ICS Cybersecurity Subject Matter Expert

    OT / ICS Cybersecurity Subject Matter Expert

    Duncan & RossRiyadh, Saudi Arabia
    We are seeking a seasoned OT / ICS Cybersecurity Subject Matter Expert (SME) to provide strategic advisory support on a part-time basis. With 12-15+ years of experience, the SME will play a pivotal ro...Show moreLast updated: 8 days ago
    • Promoted
    Principal Specialist, Cybersecurity Operations

    Principal Specialist, Cybersecurity Operations

    Ma’adenRiyadh, Saudi Arabia
    Manager : Cyber Security Operations Broad Band : .Director : Cyber Security Department & Function : .Ma’aden Cyber Security Talent Pipeline Layer : . Managing Others (MO) Overall Job Purpose.Manager : Cyber ...Show moreLast updated: 4 days ago
    • Promoted
    Cybersecurity Operations Manager

    Cybersecurity Operations Manager

    RP InternationalRiyadh, Saudi Arabia
    The Cybersecurity Operations Manager oversees the 24×7 Security Operations Center (SOC), ensuring robust monitoring, detection, and response to cyber threats. The role aligns with regional cybersecu...Show moreLast updated: 30+ days ago
    • Promoted
    Cybersecurity Operations Manager

    Cybersecurity Operations Manager

    Specialized Technical ServicesRiyadh, Riyadh Region, Saudi Arabia
    The Cybersecurity Operations Manager is responsible for the organisation's 24 / 7 Security Operations Centre (SOC) in the Kingdom of Saudi Arabia. Reporting to the Cyber Security Manager (KSA) with fu...Show moreLast updated: 30+ days ago
    • Promoted
    Cybersecurity Operations Manager / Architect (KSA National)

    Cybersecurity Operations Manager / Architect (KSA National)

    Specialized Technical ServicesRiyadh, Saudi Arabia
    At Zaintech we are proud of our culture and how it drives everything we do.We are looking for individuals who share our values and want to be part of a unique and engaging culture that revolves aro...Show moreLast updated: 9 days ago
    • Promoted
    Senior Manager - Cybersecurity Operational Technology

    Senior Manager - Cybersecurity Operational Technology

    Qiddiya | القديةRiyadh, Saudi Arabia
    Qiddiya Investment Company is at the forefront of transformative entertainment and real estate projects in Saudi Arabia, and we are seeking a Senior Manager - Cybersecurity Operational Technology t...Show moreLast updated: 22 days ago
    Senior Manager - Cybersecurity Operational Technology

    Senior Manager - Cybersecurity Operational Technology

    Qiddiya Investment CompanyRiyadh, Riyadh Province, SA
    Quick Apply
    Qiddiya Investment Company is at the forefront of transformative entertainment and real estate projects in Saudi Arabia, and we are seeking a Senior Manager - Cybersecurity Operational Technology t...Show moreLast updated: 30+ days ago
    • Promoted
    Cybersecurity Section Head

    Cybersecurity Section Head

    Leader Investment Group (LIG)Riyadh, Saudi Arabia
    Lead and oversee all cybersecurity initiatives within the organization and externally for clients and projects.Ensure compliance with national and international regulations (CST-CRF, NCA, ISO 27001...Show moreLast updated: 10 days ago
    • Promoted
    Cybersecurity Integration Specialist – KSA

    Cybersecurity Integration Specialist – KSA

    Help AGRiyadh, Saudi Arabia
    Cybersecurity Integration Specialist – KSA.On-site Integration - Client Site Help AG is looking for a talented and experienced Cybersecurity Integration Specialist who will be responsible for the s...Show moreLast updated: 30+ days ago
    • Promoted
    Cybersecurity Section Head

    Cybersecurity Section Head

    Leader Investment Group - LIGRiyadh, Saudi Arabia
    Job Purpose : Lead and oversee all cybersecurity initiatives within the organization and externally for clients and projects. Ensure compliance with national and international regulations (CST-CRF, N...Show moreLast updated: 11 days ago
    • Promoted
    Cybersecurity Operations Manager (KSA National)

    Cybersecurity Operations Manager (KSA National)

    StsarabiaRiyadh, Saudi Arabia
    Our Culture : At Zaintech we are proud of our culture and how it drives everything we do.We are looking for individuals who share our values and want to be part of a unique and engaging culture that...Show moreLast updated: 30+ days ago
    • Promoted
    Director Cybersecurity

    Director Cybersecurity

    Saudi Networkers ServicesRiyadh, Saudi Arabia
    Overview Join to apply for the.Develops cybersecurity strategy in line with its business strategy as per the guidelines provided by NCA. Monitors organization-wide security operations (vulnerability...Show moreLast updated: 10 days ago
    Cybersecurity Operations Manager / Architect (KSA National)

    Cybersecurity Operations Manager / Architect (KSA National)

    Specialized Technical Services – STSRiyadh, Riyadh Province, SA
    Quick Apply
    At Zaintech we are proud of our culture and how it drives everything we do.We are looking for individuals who share our values and want to be part of a unique and engaging culture that revolves aro...Show moreLast updated: 12 days ago
    • Promoted
    Cybersecurity Specialist

    Cybersecurity Specialist

    Help AGRiyadh, Saudi Arabia
    Help AG is looking for a talented and experienced.The ideal candidate will have hands-on expertise with : Palo Alto Networks firewalls F5 Application Delivery Controllers Fortinet solutions OPSWAT O...Show moreLast updated: 8 days ago
    • Promoted
    Cybersecurity Manager

    Cybersecurity Manager

    Air Products (Middle East) FZERiyadh, Riyadh Region, Saudi Arabia
    The Cybersecurity Manager will be responsible for developing and executing cybersecurity strategies to protect the company’s operational technology (OT) and information technology (IT) environments...Show moreLast updated: 20 days ago
    • Promoted
    Cybersecurity Specialist

    Cybersecurity Specialist

    Help AG, an e& enterprise companyRiyadh, Riyadh Region, Saudi Arabia
    Help AG, an e& enterprise company.Help AG is looking for a talented and experienced.This role focuses on break-and-fix support for cybersecurity products, including troubleshooting incidents, resol...Show moreLast updated: 8 days ago
    • Promoted
    Cybersecurity Manager

    Cybersecurity Manager

    Tap PaymentsRiyadh, Riyadh Region, Saudi Arabia
    Ensure the organization complies with key financial regulations, such as GDPR, PCI DSS, and ISO 27001.Conduct regular audits and assessments to verify compliance with industry standards and regulat...Show moreLast updated: 30+ days ago
    • Promoted
    Principal Specialist, Cybersecurity Operations

    Principal Specialist, Cybersecurity Operations

    MaadenRiyadh, Saudi Arabia
    Principal Specialist, Cybersecurity Operations Job Description.Manager : Cyber Security Operations.Overview Manager : Cyber Security Operations is responsible for monitoring, maintaining and improvin...Show moreLast updated: 2 days ago
    • Promoted
    Cybersecurity Audit Manager

    Cybersecurity Audit Manager

    RP InternationalRiyadh, Riyadh Region, Saudi Arabia
    We are seeking a Cybersecurity Audit Manager who will be responsible for leading cybersecurity audits and ensuring the effectiveness of security controls across on-premise and cloud environments.Th...Show moreLast updated: 22 days ago