Cloud Security & Encryption Specialist

cloud consultancy - ccds; As Sudiyah; On-site; OMR 25,000 - 37,000; Full time

Job summary

cloud consultancy - ccds in Riyadh, Saudi Arabia, seeks an experienced senior cloud security professional for a 13-month project-based engagement. On-site role requiring 8+ years in cloud security, encryption, and architecture.

Responsibilities include governing cloud security posture, reviewing CSPM findings, encryption controls, and coordinating with cross-functional teams to ensure secure cloud deployments.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 8+ years of cloud security, security architecture, or encryption experience.
• Strong cloud-security knowledge across compute, storage, databases, IAM, logging, monitoring, network controls.
• Hands-on experience with CSPM and cloud-native security monitoring tools.
• Knowledge of data encryption at rest and in transit, with key/certificate management.
• Knowledge of NCA requirements, Zero Trust, least privilege, and cloud risk-management practices.

Responsibilities

• Monitor cloud environments for compliance with security policies and architecture requirements.
• Review the security posture of compute, storage, database, platform, and supporting cloud services.
• Monitor cloud-security tools and dashboards, investigate suspicious activity, and coordinate response with cybersecurity teams.
• Review CSPM findings, misconfigurations, exposed services, policy violations, and unauthorized deployments or Shadow IT.
• Assess third-party cloud services and integrations and track remediation of cloud-security findings through closure.
• Define and review encryption requirements for data at rest, in transit, and during processing.
• Support governance of cryptographic controls, keys, certificates, and secure integrations in line with Ministry requirements.
• Maintain cloud asset visibility, operational reports, risk status, and remediation accountability.

Skills

Cloud security

Security architecture

Zero Trust

Least privilege

Risk management

Analytical thinking

Documentation

Cross-functional coordination

Education

Bachelor's degree in Computer Science or Information Security

Tools

CSPM tools

Cloud-native monitoring tools

Job description

Location: On-site - Riyadh, Saudi Arabia

Contract/engagement: Project-based managed cybersecurity services (13-month)

Minimum experience: 8+ years

Role Purpose

Govern and improve the security posture of cloud environments and encryption controls, ensuring secure storage, processing, transmission, and monitoring of entity data.

Key Responsibilities

• Monitor cloud environments for compliance with approved security policies, standards, and architecture requirements
• Review the security posture of compute, storage, database, platform, and supporting cloud services
• Monitor cloud-security tools and dashboards, investigate suspicious activity, and coordinate response with cybersecurity teams
• Review CSPM findings, misconfigurations, exposed services, policy violations, and unauthorized deployments or Shadow IT
• Assess third-party cloud services and integrations and track remediation of cloud-security findings through closure
• Define and review encryption requirements for sensitive data at rest, in transit, and during processing
• Support governance of cryptographic controls, keys, certificates, and secure integrations in line with Ministry requirements
• Maintain cloud asset visibility, operational reports, risk status, and remediation accountability

Requirements

Technical and Professional Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field
• At least 8 years of relevant cloud security, security architecture, or encryption experience, as specified in the workforce table
• Strong cloud-security knowledge across compute, storage, databases, platform services, IAM, logging, monitoring, network controls, and third-party integrations
• Hands-on experience with CSPM and cloud-native security monitoring tools
• Strong knowledge of data encryption at rest and in transit, cryptographic controls, key and certificate management, and secure cloud architecture
• Knowledge of NCA requirements, Zero Trust, least privilege, and cloud risk-management practices

Personal Requirements

• Strong risk judgment and ownership of remediation follow-through
• Excellent analytical, troubleshooting, and cross-functional coordination skills
• Clear technical documentation and stakeholder communication
• Proactive, detail-oriented, and comfortable working across cloud, infrastructure, SOC, IAM, and architecture teams

Professional Certifications

Preferred: CCSP, CISSP, SABSA, TOGAF, GIAC GCSA, or equivalent. A major cloud-platform security certification is also highly relevant.