Consultant

Protiviti Middle East Member Firm; Riyadh; On-site; SAR 150,000 - 210,000; Full time

Job summary

Protiviti Middle East Member Firm is seeking a Consultant with strong IT security experience to execute and manage client engagements, delivering practical security solutions and governance improvements across multiple industries.

You will apply ISO 27001, NIST CSF, and related frameworks while contributing to SOC and incident management initiatives. Travel to client sites is expected as required.

Qualifications

• 2–4+ years’ experience in Information Security and related frameworks (ISO 27001, NESA, ISR, NIST CSF).
• Certifications (desirable) – CISA, CISSP, PMP, ISO 27001.
• Experience in Network Design, Infrastructure IT Security, Vulnerability & Risk Assessment, Web app security and code review.
• Experience in SOC, security incidents and event management and related implementations.
• Hands-on with PIM, DLP and IDM technologies.
• Knowledge of OS, databases maintenance, hardening, testing and security management.

Skills

Information Security

ISO 27001

NIST CSF

Risk Management

CISA

CISSP

PMP

Network Design

Vulnerability Assessment

Penetration Testing

Python

Bash

Job description

The Firm is seeking to recruit bright and passionate individuals (Consultant) who have relevant work experience and skills in IT Consulting. The role will primarily involve executing or managing client engagements.

Desired profile:

• 2-4+ years’ experience in Information Security and related functions such as ISO 27001, NESA, ISR, NIST CSF and Cybersecurity Risk Management
• Certifications (desirable) – CISA, CISSP, PMP, ISO 27001
• Experience in the areas of Network Design, Infrastructure Audit, IT Security, Vulnerability Assessment, Risk Assessment, Web Applications Security and Source Code review.
• Experience in the areas of SOC, Security incident and Event Management
• Experience in implementation of SOC, Security incident and Event Management
• Implementation experience of various security technology such as PIM, DLP and IDM.
• Knowledge and experience in the areas of one or more Operating Systems, Databases maintenance, hardening, testing and security management.
• Understanding and knowledge of network and networking components including maintenance, hardening, testing and security management.
• Vulnerability assessment of System and Physical infrastructure including penetration testing of networks and web applications using third party & open source tools.
• Experience in the areas of establishing procedures and policies for the design, installation and commissioning of the Systems infrastructure.
• Industry domain knowledge from BFSI, Capital markets, telecom, IT/ITES, Service etc. would be an added advantage
• Excellent knowledge of Information Security technologies and methodologies particularly, including for example web server security / firewalls / networks / encryption / PKI / TCP/IP / UNIX / Windows etc.
• Knowledge in one or more scripting language like perl/php/python/bash OR one or more programming languages like C/C++/Java
• Strong knowledge and experience in ISMS/BCMS implementation would be an added advantage
• Experience of information security standards such as: ISO 27001, ISO 22301, PCI DSS, GDPRl,ITIL, COBIT would be an added advantage
• Proficient in Microsoft Office suite applications

Key Personal Attributes

• Client facing experience is desirable and added advantage
• Interpersonal skills to interact in team environment and foster client relationships
• Ability to communicate technical risk issues effectively, to customers who may, at times, have a non-technical background
• Ability to write technical reports, detailed presentations and documentation
• Demonstrated understanding of the importance of business ethics
• Sound job administration skills
• Must be able to handle highly confidential information in a strictly professional manner
• Must be able to maintain professional demeanor in times of high stress
• Open to travel as per the job requirements. It would depend upon the assignment as well.