Staff Engineer - Cyber Security

About Rasan

Job Summary

Cybersecurity Operations

• Track cybersecurity operations, incidents, vulnerabilities, remediation activities, and action plans.
• Support deployment, operation, and effectiveness monitoring of SIEM, EDR, IAM, PAM, DLP, and WAF solutions.
• Track security control implementation and escalate unresolved issues, control gaps, and remediation delays.

Governance, Risk, and Compliance

• Maintain and review cybersecurity policies, procedures, standards, and related documentation.
• Support compliance assessments against applicable frameworks and standards.
• Maintain risk registers, action plans, and remediation tracking records.

Audit and Assurance

• Support internal and external cybersecurity audits, assessments, and regulatory reviews.
• Coordinate evidence collection, documentation, and stakeholder responses.
• Track audit findings, recommendations, and corrective action plans through closure.
• Maintain accurate audit records and supporting documentation.

Reporting and Coordination

• Prepare cybersecurity dashboards, reports, metrics, KPIs, and management presentations.
• Coordinate with IT teams, business units, vendors, consultants, and third-party providers.
• Maintain cybersecurity documentation, records, and governance artifacts.

Qualifications and Experience

• Bachelor's degree in Cyber Security, Information Technology, or a related field.
• CompTIA Security+ and ISO 27001 Foundation or Lead Implementer certifications.
• CRISC certification is preferred.
• At least 4 years of cybersecurity, information security, or related experience.
• Experience in cybersecurity governance, compliance, risk management, audit coordination, or security operations support.
• Experience with cybersecurity frameworks, regulatory requirements, and control monitoring is preferred.

Skills and Abilities

• Understanding of cybersecurity principles, controls, risk management, governance, frameworks, compliance requirements, and industry standards.
• Strong coordination, reporting, documentation, stakeholder management, analytical, organizational, and follow-up capabilities.
• Ability to communicate technical cybersecurity matters to business and management audiences.
• Proficiency in reports, dashboards, presentations, and tracking mechanisms.

Workplace

• The role is based in Riyadh and is classified as on-site in the provided location metadata.