Senior Security – Lead:
Riyadh - Saudi Arabia

About El Seif:
Building the Future - One Project at a Time!
Excellence, Integrity and, Innovation - every step of the way.
At El Seif, we embrace and embody our core values of excellence, integrity, and innovation in every aspect of our work from meticulous planning to expert construction, we consistently uphold the highest standards of excellence, ensuring that our projects are delivered with precision and attention to detail. With half a century of diverse experiences across a wide range of industries, ranging from public infrastructure to military and defense applications, we have honed our expertise and gained indispensable insights that enable us to tackle complex challenges and maintain our standard of delivering exceptional results. Our forward-thinking approach sets us apart as a trusted partner in the construction industry. By continuously pushing the boundaries of innovation, we strive to pioneer the future of construction, creating sustainable and impactful solutions that leave a lasting legacy.
Major Responsibilities:
Corporate:

• Manage the development of KSA national employees across the function to support corporate objectives, Saudization targets and the knowledge dissemination culture to ensure optimal building of internal capabilities and maximize their performance

• Manage and conduct the affairs of the team with the highest standards of respect, integrity, accountability, agility, quality, safety and corporate governance

• Ensure compliance with Code of Ethics policy and adopting company values across all function’s employees and provide leadership to reinforce a strong people culture and ethical business practices

• Manage the adoption and utilization of systems and ERP in the function

Functional:
· Develop and implement an enterprise-wide information security strategy, including policies, standards, and procedures.

• Lead and manage the organization's security operations, including incident response, vulnerability management, and security monitoring.

• Conduct regular risk assessments and security audits to identify vulnerabilities and recommend appropriate countermeasures.

• Collaborate with internal teams to ensure security requirements are integrated into the design and implementation of systems, applications, and infrastructure.

• Oversee the implementation and maintenance of security controls, such as firewalls, intrusion detection/prevention systems, and access controls.

• Stay up-to-date with the latest security threats, vulnerabilities, and industry best practices, and provide guidance and recommendations to mitigate risks.

• Lead security awareness and training programs to educate employees on security policies, procedures, and best practices.

• Manage relationships with external vendors, contractors, and partners to ensure the security of outsourced systems and services.

• Stay informed about current and emerging regulatory requirements and ensure compliance with applicable laws and regulations (e.g., GDPR, HIPAA, PCI-DSS, NCA).

• Coordinate and participate in security incident response activities, including investigation, containment, and remediation.

• Conduct regular security assessments and penetration testing to identify vulnerabilities and assess the effectiveness of security controls.

• Prepare and present security reports and metrics to senior management, highlighting the organization's security posture and any identified risks.

Knowledge, Skills, Competencies and Experience:

• Bachelor's degree in Computer Science, Information Technology, or a related field. Relevant certifications (e.g., CISSP, CISM, Comp TIA Security+) are highly desirable with +10 years’ experience

• Proven experience in a senior-level security role, with a focus on information security management and operations.

• Strong knowledge of security principles, standards, frameworks, and regulations (e.g., ISO 27001, NIST Cybersecurity Framework, GDPR).

• In-depth understanding of network and systems security, including firewalls, intrusion detection/prevention systems, and vulnerability management.

• Experience with security technologies, such as SIEM, IDS/IPS, DLP, and endpoint protection.

• Familiarity with cloud security principles and best practices (e.g., AWS, Azure).

• Strong analytical and problem-solving skills, with the ability to assess complex security issues and recommend practical solutions.

• Excellent communication and interpersonal skills, with the ability to collaborate and influence stakeholders at all levels of the organization.

• Proven leadership and people management skills, with the ability to lead and mentor a team of security professionals.

• Ability to work effectively in a fast-paced and dynamic environment, managing multiple priorities and projects simultaneously.

• Data Security Management

• IT Infrastructure & IT Applications

• CCNP Security, CEH, CISSP, CISM

• Comp TIA Security+

• GIAC Security Certifications.

Primary Location: Saudi Arabia

Job: AAFAQ-IMT

Organization: ESEC - OPERATIONS

Schedule: Regular

Full-time

Day Job

Job Posting: Sep 4, 2024, 1:45:05 AM