Senior Security Assurance Specialist

HungerStation; Riyadh; On-site; SAR 150,000 - 200,000; Full time

Job summary

A leading food delivery service is looking for a Senior Security Assurance Specialist to enhance information security for users and partners. The role involves developing security policies, conducting risk assessments, and ensuring compliance with established standards. Candidates should have 4–6 years of relevant experience and a Bachelor's degree in a related field, with at least two security certifications. This position provides a vital opportunity to uphold the organization's security culture and implement effective security initiatives.

Qualifications

• 4–6 years of experience in information security, risk, governance, or compliance roles.
• Strong knowledge of information security risk assessment and risk management frameworks.
• Technical understanding of information security controls.

Responsibilities

• Develop and maintain strong information security culture.
• Design and deliver information security awareness training programs.
• Conduct regular risk assessments across information assets.
• Ensure compliance with information security policies and standards.

Skills

Information security risk assessment

Risk management frameworks

Information security audits

Security awareness training

Education

Bachelor’s degree in Computer Science or related field

CISSP certification

CRISC certification

CISA certification

CISM certification

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

Job description

Job Description

We are looking for an Senior Security Assurance Specialist (Saudi Nationals Only) to help improve information security for HungerStation users, partners and employees also monitor all activities related to information security governance, risk management, compliance and security awareness within the Organizational policies and procedures.

Key Responsibilities

Security Governance

• Develop and maintain mechanisms to promote a strong information security culture across the organization.
• Design and deliver comprehensive information security awareness and training programs for all employees, including role‑specific training where required.
• Continuously review and improve security policies and procedures in line with the evolving threat and maintain a centralized information security knowledge repository to support audits and knowledge sharing.

Security Risk Management

• Implement and maintain the information security risk assessment methodology, policies, and processes.
• Assess the organization’s overall risk posture by conducting regular risk assessments across all information assets.
• Develop and maintain up‑to‑date information security risk profiles.
• Define, track, and review risk mitigation plans, ensuring timely follow‑up and appropriate escalation of identified risks.

Security Compliance

• Monitor and ensure compliance with Delivery Hero (DH) and HungerStation (HS) information security policies, standards, guidelines, and procedures.
• Proactively manage ongoing compliance, certifications, and re‑certifications against relevant security standards and regulations.
• Coordinate and support internal and external audits, ensuring timely and accurate fulfillment of audit requirements.

Overall Governance & Resilience

• Adhere to established policies, procedures, and processes to ensure work is carried out in a consistent and controlled manner.
• Identify and contribute to continuous improvement opportunities to enhance security processes and operational effectiveness.
• Promote a high‑performance culture while upholding HungerStation’s values and commitment to resilience and security excellence.

Qualifications

Knowledge & Experience

• 4–6 years of relevant experience in information security, risk, governance, or compliance roles.
• Strong hands‑on knowledge of information security risk assessment and risk management frameworks.
• Deep technical understanding of information security controls and their practical implementation.
• Proven experience managing and conducting internal and external information security audits.
• Experience designing and delivering end‑to‑end information security awareness and training programs across organizations.

Education & Certifications

• Bachelor’s degree in Computer Science, Computer Engineering, or a related field.
• At least two of the following certifications are mandatory: CISSP, CRISC, CISA, CISM, ISO/IEC 27001 Lead Implementer (LI) or Lead Auditor (LA), or equivalent.