Saudi Service Company Limited (SSCL) is a leading service provider in the Kingdom of Saudi Arabia, specializing in maintenance operations, facility management, and technical support services. The company is committed to delivering reliable, high-quality, and cost-effective solutions that ensure the smooth and efficient operation of client facilities across healthcare, industrial, and commercial sectors.
Job Purpose:
Ensure the protection of the organization's IT infrastructure against cyber threats by developing and implementing security protocols, safeguarding data integrity, and promoting a secure technology environment for sustainable operations.
Key Responsibilities:
- Implements departmental strategies through actionable plans, ensuring alignment with organizational priorities and performance targets.
- Leads teams effectively by managing resources, motivating staff, and fostering collaboration for operational excellence.
- Monitors performance metrics, budgets, and processes to ensure compliance, efficiency, and cost control.
- Facilitates issue resolution, promotes continuous improvement, and ensures client satisfaction through proactive service delivery.
- Coordinates with support functions (e.g., procurement, HR, QHSE) to align operational needs with corporate standards and contract requirements.
- Develops actionable and measurable work plans to achieve specific objectives, ensuring resource availability and team alignment.
- Leads teams by providing guidance, feedback, and opportunities for skill enhancement to foster growth and efficiency.
- Analyzes situations effectively, makes informed decisions, and develops creative solutions to overcome operational challenges.
- Conduct risk assessments and vulnerability analyses to identify potential threats to the company’s networks, data, and systems.
- Monitor network traffic, security logs, and alerts to detect and respond to cyber incidents and security breaches.
- Develop and maintain incident response protocols, ensuring the organization is prepared to effectively handle cyber -attacks, breaches, or data leaks.
- Collaborate with other IT departments, management, and external partners to ensure a holistic and integrated approach to security.
- Train and educate employees on security best practices and raise awareness about potential threats such as phishing or social engineering attacks.
- Manage and oversee security tools and technologies, including firewalls, encryption software, and intrusion detection systems, to mitigate risks.
- Stay current with cybersecurity trends, threats, and best practices to ensure the organization’s security measures remain effective and up to date.
- Identify opportunities to improve security processes and recommend solutions to enhance system protection and operational resilience.
- Ensure effective communication with senior management regarding cybersecurity risks and strategies to mitigate threats.
- Ensure alignment of individual and team efforts with the organization's strategic goals, fostering a culture of collaboration, accountability, and continuous improvement to achieve desired outcomes.
- Perform any additional duties or tasks assigned by the direct supervisor, as required to support departmental and organizational objectives.
Education & Experience:
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
- Master’s degree in Cybersecurity or Information Security is a plus.
- 8-10 years of experience in IT security or cybersecurity roles, with at least 2 -3 years in a managerial position.
- Proven experience in managing cybersecurity operations, incident response, and security policy.
- Certified Information Systems Security Professional (CISSP) preferred.
- Certified Ethical Hacker (CEH).
- Certified Information Security Manager (CISM).
- Other relevant certifications (e.g., CompTIA Security+, GIAC, Cisco Certified CyberOps Associate) are a plus.