Cloud Security & Encryption Specialist

Location

• The role is on-site in Riyadh, Saudi Arabia.

Contract and Engagement

• The engagement is project-based managed cybersecurity services for 13 months.

Role Purpose

Key Responsibilities

• Monitor cloud environments for compliance with approved security policies, standards, and architecture requirements.
• Review the security posture of compute, storage, database, platform, and supporting cloud services.
• Monitor cloud security tools and dashboards, investigate suspicious activity, and coordinate response with cybersecurity teams.
• Review CSPM findings, misconfigurations, exposed services, policy violations, unauthorized deployments, and Shadow IT.
• Assess third-party cloud services and integrations and track remediation of cloud security findings through closure.
• Define and review encryption requirements for sensitive data at rest, in transit, and during processing.
• Support governance of cryptographic controls, keys, certificates, and secure integrations in line with Ministry requirements.
• Maintain cloud asset visibility, operational reports, risk status, and remediation accountability.

Technical and Professional Requirements

• A bachelor’s degree in Computer Science, Information Security, or a related field is required.
• At least 8 years of relevant cloud security, security architecture, or encryption experience is required.
• Strong cloud security knowledge is required across compute, storage, databases, platform services, IAM, logging, monitoring, network controls, and third-party integrations.
• Hands-on experience with CSPM and cloud-native security monitoring tools is required.
• Strong knowledge of data encryption, cryptographic controls, key and certificate management, and secure cloud architecture is required.
• Knowledge of NCA requirements, Zero Trust, least privilege, and cloud risk-management practices is required.

Personal Requirements and Certifications

• Strong risk judgment, remediation ownership, analytical ability, troubleshooting skills, and cross-functional coordination are required.
• Clear technical documentation, stakeholder communication, proactive behavior, and attention to detail are required.
• Experience working across cloud, infrastructure, SOC, IAM, and architecture teams is required.
• CCSP, CISSP, SABSA, TOGAF, GIAC GCSA, an equivalent certification, or a major cloud-platform security certification is preferred.