Cybersecurity Consultant

Protech; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Protech in Riyadh is seeking a Cybersecurity Consultant to conduct risk assessments, threat modeling, and security audits across networks, systems, and applications. You will translate complex findings into actionable guidance for clients.

The role also covers developing security strategies, ensuring regulatory compliance, implementing security controls, and supporting incident response. You will collaborate with IT and development teams to embed security by design throughout SDLC, staying ahead

Qualifications

• Bachelor’s degree in IT or Information Security; master's preferred.
• Industry certifications such as CISSP, CISM, CEH, OSCP, ISO 27001 Lead Implementer/Auditor.
• 3+ years in cybersecurity, preferably consulting or advisory.
• Strong understanding of network, cloud, endpoint, and application security.
• Familiarity with SIEM, penetration testing tools, vulnerability management & GRC platforms.
• Excellent communication and ability to convey technical concepts to non-technical stakeholders.
• Strong analytical thinking and problem-solving skills.

Responsibilities

• Conduct risk assessments, vulnerability scans, and security audits of networks, systems, and applications.
• Evaluate security controls and recommend improvements.
• Develop and implement security strategies, policies, and procedures per standards.
• Provide guidance on regulatory compliance (GDPR, HIPAA, PCI-DSS).
• Assist design and implementation of technical security solutions (firewalls, IAM, SIEM, DLP, encryption).
• Lead or support incident response and digital forensics investigations.
• Prepare detailed technical reports, risk mitigation plans, and executive summaries.
• Advise on security awareness programs and training initiatives.
• Collaborate with IT and development to embed security by design in SDLC.
• Stay current with emerging threats and technologies.

Skills

Risk assessments

Vulnerability scans

Security audits

Security controls

Incident response

Digital forensics

Technical reporting

Security awareness

Security by design

Threat intelligence

Networking security

Cloud security

Education

Bachelor's degree

Master's degree

Tools

SIEM tools

Penetration testing

Vulnerability management

GRC platforms

Job description

• Conduct comprehensiverisk assessments,vulnerability scans, andsecurity auditsof networks, systems, and applications.
• Evaluate the effectiveness of existingsecurity controlsand recommend improvements.
• Develop and implementsecurity strategies, policies, and procedures in line with industry standards (e.g., ISO 27001, NIST, CIS).
• Provide guidance onregulatory compliance(e.g., GDPR, HIPAA, PCI-DSS).
• Assist with the design and implementation oftechnical security solutionssuch as firewalls, endpoint protection, SIEM, IAM, DLP, and encryption.
• Lead or supportincident responseand digital forensics investigations when security breaches occur.
• Prepare and deliver detailedtechnical reports, risk mitigation plans, and executive summaries.
• Advise stakeholders and clients onsecurity awareness programsandtraininginitiatives.
• Collaborate with IT and development teams to embedsecurity by designin IT infrastructure and software development life-cycles.
• Stay current with emergingthreats, vulnerabilities, and technologiesto ensure up-to-date protection.

Qualifications:

• Bachelor’s degree in IT, Information Security, or related field (Master’s is a plus).
• Industry certifications such asCISSP, CISM, CEH, OSCP, ISO 27001 Lead Implementer/Auditor, or similar.
• 3+ years of experience in Cybersecurity roles, preferably in consulting or advisory environments.
• Strong understanding ofnetwork security, cloud security, endpoint protection, andapplication security.
• Familiarity withSIEM tools,penetration testing tools,vulnerability management & GRC platforms.
• Excellent communication skills with the ability to convey complex technical concepts to non-technical stakeholders.
• Strong analytical thinking and problem-solving skills.

Info

Job Title:

Cybersecurity Consultant

Department

Cybersecurity Consultation Services

Report to (Direct)

Cybersecurity Consulting & Services Manager