IT Cybersecurity Specialist

RATP Dev; Riyadh; On-site; SAR 230,000 - 420,000; Full time

Job summary

CAMCO is seeking a seasoned IT security professional to manage security operations for Riyadh’s automated metro network. You will lead incident response, monitoring, vulnerability management, IAM, data protection, and compliance initiatives across IT/OT environments.

Ideal candidates have 5+ years in security operations, strong SIEM/EDR skills, cloud security knowledge, and a Bachelor’s degree in a related field.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field is required.
• Relevant certifications (e.g., CISSP, CompTIA Security+) are a plus.
• 5+ years in IT security focusing on operations and incident response.

Responsibilities

• Manage endpoint protection, EDR, DLP, and firewalls.
• Oversee IAM tasks: access rights, least privilege, role reviews.
• Conduct vulnerability assessments and coordinate remediation.
• Monitor security events, investigate incidents, and perform root cause analysis.
• Ensure data protection with encryption and robust backups.
• Participate in change management and assess security impact of changes.
• Conduct security audits, risk assessments, and regulatory checks.
• Provide guidance on cybersecurity best practices to staff.
• Analyze security alerts and trends to identify threats.
• Coordinate with vendors for third-party security risk management.
• Deliver cybersecurity awareness training to employees.
• Stay updated on regulatory changes affecting security and privacy.

Skills

SIEM

IDS/IPS

Firewalls

VPN

Cloud security

Scripting

Education

Bachelor’s degree in Computer Science or Information Security

Tools

AWS

Azure

GCP

Job description

About the company

CAMCO – Capital Metro Company is a Saudi-French jointventure between RATP Dev and SAPTCO, responsible for the operation andmaintenance of Riyadh Metro’s Blue and Red Lines. CAMCO plays a key role inoperating one of the world’s largest fully automated metro networks. With morethan 3,000 employees, our teams are at the heart of delivering safe, reliableand efficient metro services across Riyadh.

Key Responsibilities

• 1. Endpoint and Network Security:
  • Implement and manage endpoint protection solutions, includingantivirus, EDR, and DLP tools.
  • Maintain firewalls, intrusion detection/prevention systems, and othernetwork security tools.
  • Configure and manage secure access solutions such as VPNs andidentity management tools.
• 2. Identity and Access Management (IAM):
  • Manage user access, permissions, and roles across systems andapplications.
  • Ensure adherence to least privilege principles and regularly reviewaccess controls.
• 3. Risk Assessment and Vulnerability Management:
  • Conduct regular vulnerability assessments and penetration testing onIT systems.
  • Prioritize and remediate identified vulnerabilities, coordinating withrelevant teams.
  • Evaluate and document IT/OT risks, proposing appropriate mitigationstrategies.
• 4. Security Monitoring and Incident Response:
  • Monitor networks, systems, and applications for security eventsand anomalies.
  • Investigate, document, and respond to cybersecurity incidents,ensuring swift containment and recovery.
  • Perform root cause analysis and develop recommendations toprevent future incidents.
• 5. Data Protection and Backup:
  • Implement and manage data encryption and other protectionmechanisms for sensitive information.
  • Ensure robust data backup and recovery plans are in place andtested regularly.
• 6. Incident and Change Management:
  • Participate in the IT/OT change management process to assessthe security impact of proposed changes.
  • Collaborate with other teams to maintain operational andcybersecurity alignment.
• 7. Conduct security audits, risk assessments, and compliance checks toidentify gaps, recommend improvements, and ensure adherence torelevant regulations and industry standards.
• 8. Provide guidance and support to end-users regarding cybersecurity bestpractices, policies, and procedures.
• 9. Monitor and analyze security alerts, events, and trends to proactivelyidentify potential threats and vulnerabilities.
• 10. Collaborate with external vendors and partners to assess and managethird-party security risks and ensure compliance with contractualobligations.
• 11. Assist in developing and delivering cybersecurity awareness and trainingprograms for employees.
• 12. Stay informed about legal and regulatory changes related tocybersecurity and privacy and ensure the organization's compliance.

Knowledge and Skills

• Strong knowledge of cybersecurity tools and technologies (SIEM, IDS/IPS, firewalls, etc.).
• Strong knowledge of cybersecurity principles, best practices, and frameworks (e.g., NIST Cybersecurity Framework, ISO 27001).
• Proficient in forensic tools and techniques for investigating incidents
• Familiarity with network security concepts, protocols, and technologies (e.g., VPN, DNS, IPsec, SSL/TLS).
• Hands-on experience with scripting and automation for security tasks
• Knowledge of cloud security principles and technologies (e.g., AWS, Azure, Google Cloud Platform).
• Understanding of common cyber threats, attack vectors, and mitigation techniques.

Qualifications

• Bachelor’s degree in computer science, Information Security, or a related field.
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security Professional (CISSP)) are a plus.

Experience

• 5+ years of experience in IT security or a similar role, with a focus on cybersecurity operations and incident response.
• Experience with security monitoring and vulnerability assessment tools (e.g., SIEM, IDS/IPS, vulnerability scanners).