IT Security Manager

Black & Grey HR; Al Khobar; On-site; SAR 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a skilled Network Support Engineer to enhance its network infrastructure. This role involves developing security strategies, leading incident response efforts, and ensuring compliance with regulatory standards. The ideal candidate will have extensive experience in IT security, particularly in managing security tools and conducting audits. This position offers the opportunity for career growth and exposure to high-impact projects within a dynamic environment. If you're passionate about cybersecurity and ready to make a significant impact, this is the perfect opportunity for you.

Benefits

Competitive salary

Benefits package

Career growth opportunities

Exposure to high-impact projects

Qualifications

• 10+ years in IT security with 5+ in a managerial role.
• Experience with security tools like firewalls and SIEM solutions.

Responsibilities

• Maintain and optimize network infrastructure for business continuity.
• Lead incident response efforts and conduct regular risk assessments.

Skills

Network Security

Incident Response

Risk Management

Security Audits

Vulnerability Scanning

Cloud Security

Data Protection

Identity and Access Management

Education

Bachelor's degree in Information Technology

Master's degree in Cybersecurity

Tools

SIEM

Firewalls

IDS/IPS

Endpoint Protection

VPNs

Encryption Tools

Job description

Job Description

Black & Grey HR is recruiting for a well-established retail group in Saudi Arabia looking to hire a skilled Network Support Engineer. The ideal candidate will be responsible for maintaining, supporting, and optimizing the company’s network infrastructure to ensure business continuity across distributed retail locations.

Security Strategy Development & Implementation

• Formulate and enforce a comprehensive IT security strategy aligned with business goals and risk management objectives.
• Establish and maintain security policies, standards, and procedures to safeguard sensitive data and prevent unauthorized access.
• Collaborate with business units to integrate security requirements into IT systems and workflows.

Incident Response & Risk Management

• Lead response efforts during security incidents, including investigation, containment, and remediation.
• Conduct regular risk assessments, vulnerability scans, and penetration tests to identify system weaknesses.
• Analyze security alerts and incidents, taking appropriate actions to minimize risks.

Security Operations & Monitoring

• Oversee the operation of security tools (e.g., SIEM, firewalls, IDS / IPS, endpoint protection) to detect and respond to threats.
• Ensure continuous monitoring of critical infrastructure for real-time threat detection and response.
• Manage vulnerability remediation, including patch deployment and system updates.

Compliance & Audit Readiness

• Ensure adherence to regulatory standards such as GDPR, HIPAA, and PCI-DSS.
• Conduct internal audits and assessments to verify the effectiveness of security controls.
• Coordinate and support external audits and compliance assessments.

Leadership & Team Development

• Lead, mentor, and develop a team of security analysts and engineers.
• Promote cybersecurity awareness through ongoing training and education.
• Cultivate a culture of proactive security and risk awareness across the organization.

Cross-Functional Collaboration

• Partner with IT teams to embed security within infrastructure, applications, and system designs.
• Advise business leaders and project teams on security risks and requirements throughout project lifecycles.

Security Architecture & Technology

• Assess, recommend, and implement security tools and technologies to enhance overall security posture.
• Collaborate with architects to design secure IT environments, including on-premises and cloud-based systems.
• Ensure consistent application of security protocols across all platforms.

Reporting & Communication

• Provide clear communication to executives on security risks, incidents, and mitigation strategies.
• Deliver regular updates and metrics on security operations to senior leadership and stakeholders.
• Serve as the primary point of contact for security-related matters across the organization.

Requirements

Education & Experience:

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Minimum of 10 years of experience in IT security, with at least 5 years in a cybersecurity and managerial or leadership role.
• Extensive experience with security tools, including firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM solutions, and endpoint protection.

Technical Skills:

• Strong understanding of network security, application security, identity and access management (IAM), and data protection.
• Proficient in implementing and managing security technologies such as firewalls, VPNs, encryption, anti-malware solutions, and more.
• Experience with security audits, vulnerability scanning, and penetration testing methodologies.
• Familiarity with cloud security (AWS, Azure, GCP) and hybrid IT environments.

Certifications (Preferred):

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (CEH)
• CompTIA Security+ or similar cybersecurity certifications

Benefits

• Competitive salary and benefits package
• Career growth and exposure to high-impact projects