Cybersecurity Consultant

About Tap

The Cybersecurity Team

• Do you get all excited when you hear terms like vulnerability assessment, penetration tests, security verification processes, or intrusion detection?
• If so, you are in the right place.
• Our Cybersecurity Team spends every waking (and sleeping) minute detecting security threats before they happen.
• Join the band and help us build ultra-secure payments technology for our customers.
• As a Tapster you will:
• Ensure full alignment with SAMA Cybersecurity Framework and Tap s group standards.
• Maintain and update cybersecurity documentation including policies, procedures, standards, and control registers.
• Support internal and external cybersecurity audits and regulatory reviews.
• Prepare reports and responses to regulatory inquiries, inspections, and follow-ups.
• Coordinate remediation activities and track progress of corrective action plans.
• Conduct risk assessments and control testing across systems and environments.
• Identify, evaluate, and document cybersecurity risks, recommending mitigation actions.
• Support threat intelligence analysis and vulnerability management.
• Facilitate penetration tests and follow-up on findings closure.
• Participate in risk review committees and ensure cyber risk reporting accuracy.
• Support daily monitoring of security alerts, logs, and anomalies through the SOC.
• Coordinate incident response and forensic investigations when required.
• Ensure timely containment, eradication, and recovery for security events.
• Maintain incident registers and lessons-learned reports.
• Validate that monitoring tools and SIEM configurations align with group baselines.
• Support implementation of endpoint protection, access control, and encryption mechanisms.
• Verify compliance with system hardening, patching, and network segmentation policies.
• Oversee secure integration of new applications, APIs, and third-party services.
• Participate in architecture reviews to validate security-by-design principles.
• Review change management and deployment activities for cybersecurity impact.
• Deliver cybersecurity awareness and phishing simulation campaigns for KSA staff.
• Promote a culture of security and compliance within the organization.
• Contribute to the development of new security initiatives and group Projects.
• Monitor emerging threats, tools, and best practices to enhance Tap s defense posture.
• Support periodic business continuity and disaster recovery testing.
• What you will bring to the party:
• Proficient with SIEM, IDS/IPS, endpoint protection, and vulnerability management tools.
• Strong understanding of SAMA Cybersecurity Framework, ISO 27001, NSIT and PCI DSS.
• Knowledge of AWS cloud security and identity management (IAM, MFA, encryption).
• Experience in implementing and auditing cybersecurity controls in regulated financial or fintech environments.
• Familiarity with KSA laws, including the Personal Data Protection Law (PDPL).
• Minimum 3 5 years of experience in cybersecurity, IT risk, or information security roles.
• Certifications preferred: CISSP, CISM, CEH, ISO 27001 LA/LI, CompTIA Security+.
• Strong analytical and problem-solving skills.
• High attention to detail and integrity.
• Excellent written and verbal communication skills in English and Arabic.
• Collaborative mindset with the ability to work cross-functionally.