Staff Cyber Security Engineer — Governance & Operations

Rasan; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Rasan is seeking a Staff Engineer – Cyber Security to oversee governance, risk, and operational security initiatives. You will coordinate across leadership, technical teams, and business stakeholders to track risk, compliance, and remediation efforts.

The role emphasizes reporting, metrics, and collaboration with vendors and third parties to strengthen the organization’s security posture.

Qualifications

• Bachelor's degree in Cyber Security, IT or related field.
• Certifications such as CompTIA Security+, ISO 27001 Foundation/Lead Implementer are preferred.
• CRISC is preferred for risk and control focus.
• 4+ years of cybersecurity, information security or related experience.

Responsibilities

• Follow up with technical teams on security operations, incidents, vulnerabilities, and remediation progress.
• Monitor implementation of cyber action plans and track completion against timelines.
• Support deployment, operation and monitoring of security technologies (SIEM, EDR, IAM, PAM, DLP, WAF).
• Track control implementation and identify delays, risks or issues needing management attention.
• Escalate unresolved issues and remediation delays to cybersecurity leadership.
• Support governance, policy maintenance, and regulatory compliance activities.
• Assist in audits, evidence collection, and remediation tracking.
• Maintain risk registers, action plans, and remediation records.
• Prepare cybersecurity dashboards, reports, and KPIs for management.

Skills

Cybersecurity principles

Governance & risk

Reporting & stakeholder mgmt

Communication to business mgmt

Analytical & follow-up

Dashboard & tracking

Education

Bachelor's degree in Cyber Security / IT

Tools

SIEM

EDR

IAM

PAM

DLP

WAF

Job description

Rasan is seeking a Staff Engineer – Cyber Security to oversee governance, risk, and operational security initiatives. You will coordinate across leadership, technical teams, and business stakeholders to track risk, compliance, and remediation efforts.

The role emphasizes reporting, metrics, and collaboration with vendors and third parties to strengthen the organization’s security posture.