Senior Security & ICT Risk & Compliance Inspector

AECOM Middle East Ltd; Riyadh; On-site; SAR 16,000 - 25,000; Full time

Job summary

AECOM Riyadh is seeking a Security and ICT Inspector - Risk and Compliance to lead independent inspections of security controls, ICT infrastructure, and regulatory compliance across facilities. You will perform structured risk assessments, identify vulnerabilities, document findings, and provide actionable recommendations to reduce technology risk and strengthen resilience.

The role requires a minimum of 8 years of experience in security audits, ICT inspections, and risk management within

Qualifications

• Minimum 8 years of professional experience in security audits, ICT inspections, security assessments or comparable technology assurance activities.
• Strong knowledge of ICT infrastructure, network systems, information-security architecture, and security-control design.
• Ability to communicate security concerns clearly to both technical and non-technical stakeholders.

Responsibilities

• Conduct scheduled security and ICT inspections across facilities, technology systems, and supporting infrastructure.
• Review network environments for weaknesses, control gaps, and security exposure.
• Assess ICT systems against internal policies and applicable security requirements.
• Examine security architecture and determine whether controls remain appropriate for identified risks.
• Perform structured security risk assessments across assigned environments.
• Identify vulnerabilities that could affect systems, data, infrastructure, or business operations.
• Evaluate potential threats and determine their likely operational impact.
• Prioritize findings according to severity, likelihood, and business exposure.
• Develop practical remediation recommendations for identified security weaknesses.
• Review network security protocols and associated technical controls.
• Assess user access controls, permissions, authentication measures, and related safeguards.
• Evaluate data protection measures against applicable policies and compliance requirements.
• Verify adherence to security regulations and recognized industry frameworks.
• Review compliance with internal ICT and information-security standards.
• Examine technical evidence supporting security-control implementation.
• Conduct security audits and maintain clear documentation of findings.
• Prepare comprehensive inspection reports covering observations, risks, and recommended actions.
• Present technical findings in language suitable for both technical and non-technical stakeholders.
• Maintain inspection registers, audit records, and supporting evidence.

Skills

Security inspections

ICT inspections

Security audits

ICT audits

Risk assessments

Vulnerability analysis

Threat identification

Network security

Data protection

Security compliance

ISO 27001

CISSP

Stakeholder management

Project coordination

Job description

AECOM Riyadh is seeking a Security and ICT Inspector - Risk and Compliance to lead independent inspections of security controls, ICT infrastructure, and regulatory compliance across facilities. You will perform structured risk assessments, identify vulnerabilities, document findings, and provide actionable recommendations to reduce technology risk and strengthen resilience.

The role requires a minimum of 8 years of experience in security audits, ICT inspections, and risk management within