Senior Manager- Technology Consulting -Infrastructure Security

EY; Riyadh; On-site; SAR 262,000 - 375,000; Full time

Job summary

A leading professional services firm in Riyadh is seeking an Infrastructure Security Tower Lead. This role will manage and improve infrastructure security controls in line with cybersecurity policies. Candidates should have over 10 years of experience and expertise in firewalls, network segmentation, and incident response. Key responsibilities include overseeing security deployments and ensuring compliance with NCA controls.

Qualifications

• 10+ years in infrastructure or network security.
• Experience with firewalls and endpoint protection suites.
• Familiarity with OT / ICs security models and segmentation practices.

Responsibilities

• Oversee deployment and tuning of firewalls, IDS / IPS, and EDR solutions.
• Define zoning policies and enforce network segregation.
• Ensure compliance with NCA / CRF controls for infrastructure assets.
• Lead incident response for infrastructure-related threats.

Skills

Infrastructure security management

Network segmentation

Endpoint security

Incident response

Vulnerability management

Education

CISSP

CCNP Security

Tools

Fortinet

Palo Alto

Cisco

Job description

Infrastructure Security Tower Lead

Role Purpose

Lead the implementation, management, and continuous improvement of infrastructure security controls including firewalls, network segmentation, endpoint security, and zoning aligned to Aramco’s cybersecurity policies and CST / NCA

Key Responsibilities

Oversee deployment and tuning of firewalls, IDS / IPS, and EDR solutions.

Define zoning policies and enforce network segregation across DCs.

Ensure compliance with NCA / CRF controls for infrastructure assets.

Lead incident response for infrastructure-related threats.

Drive vulnerability management remediation for OS and network devices.

Requirements

10+ years in infrastructure or network security.

Experience with Fortinet, Palo Alto, Cisco, and endpoint protection suites.

Familiarity with OT / ICs security models and segmentation practices.

Certifications: CISSP, CCNP Security, or equivalent.