Assistant Manager - Cloud Security

Qiddiya Investment Company; Riyadh; On-site; SAR 80,000 - 100,000; Full time

Job summary

A leading company in the Riyadh region is looking for an Assistant Manager - Cloud Security to enhance their cloud infrastructure's security framework. The role involves implementing security practices, ensuring compliance, and collaborating with various teams to secure cloud services. The ideal candidate will have a strong background in cloud security and compliance regulations.

Qualifications

• Knowledgeable in cloud security practices and compliance regulations.

Responsibilities

• Assist in implementing security controls in GCP environments.
• Support compliance efforts with NCA CCC and ISO/IEC 27001.
• Collaborate with teams to embed security into cloud architectures.

Skills

Cloud Security

Compliance

Risk Assessment

Tools

Google Cloud Platform

Job description

Qiddiya Investment Company is seeking a knowledgeable and proactive Assistant Manager - Cloud Security to support our cloud infrastructure's security framework. In this role, you will assist in implementing and managing security practices to protect cloud services and data, ensuring compliance with relevant regulations and organizational policies.

Responsibilities

• Assist in the implementation and maintenance of security controls across Google Cloud Platform (GCP) environments, focusing on workloads classified as sensitive or regulated.
• Support compliance efforts with NCA CCC and ISO/IEC 27001, including audits, risk assessments, gap analyses, and evidence collection.
• Collaborate with cloud engineering, DevOps, and IT teams to embed security into cloud-native architectures and CI/CD pipelines.
• Monitor cloud configurations and policies to ensure adherence to internal security baselines and regulatory requirements.
• Participate in cloud security incident triage and coordinate response actions in collaboration with SOC and incident response teams.
• Contribute to the development and enforcement of IAM best practices, including identity federation, role-based access control, and least privilege access design.
• Assist in drafting and updating cloud-specific security documentation, including policies, procedures, and technical guidelines.