Cyber Security Specialist (Based In Saudi Arabia)

Aramco energizes the world economy.

Aramco occupies a unique position in the global energy industry. We are the world's largest producer of hydrocarbons (oil and gas), with the lowest upstream carbon intensity of any major producer. 

With our significant investment in technology and infrastructure, we strive to maximize the value of the energy we produce for the world along with a commitment to enhance Aramco’s value to society.

Headquartered in the Kingdom of Saudi Arabia, and with offices around the world, we combine market discipline with a generations’ spanning view of the future, born of our nine decades experience as responsible stewards of the Kingdom’s vast hydrocarbon resources. This responsibility has driven us to deliver significant societal and economic benefits to not just the Kingdom, but also to a vast number of communities, economies, and countries that rely on the vital and reliable energy that we supply.

We are one of the most profitable companies in the world, as well as amongst the top five global companies by market capitalization.

Overview

We are seeking a Cyber Security Specialist to join our Global Manufacturing Excellence Organization under thetechnical support team.
 

The technical support is a multi-disciplinary team provides the required high-quality technical support to GMoperating facilities (Refineries, NGLF, and petrochemical plants) insides the Kingdom of Saudi Arabia & acrossthe globe. As a Cybersecurity Specialist acritical role is safeguarding digital assets. Implement and managerobust cybersecurity measures, monitor security incidents, and conduct vulnerability assessments. Providetraining to enhance security awareness across the admin area.
 

Your primary role will be to support the Global Manufacturing Digital Transformation programs and relateddeployments which aim at maximizing the digital value realization, utilization and benefits by deployinginnovative and efficient digital transformation solutions and technologies across Global Manufacturing facilities.You will provide technical leadership to effectively implement the Governance, Risk, and Compliance (GRC)requirements across all IT/OT areas.
 

Additionally, you’ll provide technical leadership in the overall Cyber Defense by ensuring Security Design &Architecture, Security Operations, Incident Response, Forensics, Penetration Testing, Network, Systems andApplication Security, Risk Management, Red Teaming, Emerging Threat Analysis and Intelligence, SecurityAutomation, Data Analytics & Machine Learning.

Key Responsibilities

As the successful candidate you will be required to perform the following:
 

• Monitor security incidents and conduct investigations.
• Implement cybersecurity policies and procedures.
• Conduct vulnerability assessments and risk analysis.
• Provide training on security awareness.
• Ensure protection of critical information and infrastructure
• Provide Application Security, Cloud Security, Database, Network Security. Working with cybersecurity frameworks and standards such as NIST Cybersecurity Framework (NIST CSF), ISO, 800-53/171…etc to assessesthe maturity of an organization’s Cybersecurity capabilities.
• Provide project consulting, evaluating proposed solutions including vendor products & services for informationsecurity architecture, risks and recommending alternative solutions or compensating controls.
• Perform security architecture / application design reviews of projects, products and solutions and ensures theyaligned in accordance with security policies and best practices to meet corporate security requirements.
• Identify gaps in the current projects security design, cybersecurity reference architecture, architecture designpatterns and recommend security enhancements.
• Define new security architecture patterns for advanced technologies such as IoT, AI, Metaverse…etc.

Minimum Requirements

• You must hold a Bachelor Degree in Computer Science, Cybersecurity or equivalate from a recognized andapproved program. Required expert level certificates CISSP, CCIE and CISM.
• You should have a minimum 12 years’ experience in interrelated field of Info. Technology, including knowledgein Cybersecurity.
• You must have Certified Info Sys Security Professional (CISSP), Certified Information Security Manager (CISM)and CCIE.
• Experience in cloud security, workloads, cabernet, web3, blockchain, network Security, application Securityand APIs integration is required.
• Experience in managing the security of cybersecurity cloud platforms and hybrid cloud environments is also arequirement.
• Experience in developing zero trust security roadmap, capability, architectures and standards should bedemonstrated.
• You should possess a solid Understanding of emerging security threats and designs security referencearchitecture to mitigate threats.

Working environment

Our high-performing employees are drawn by the challenging and rewarding professional, technical and industrial opportunities we offer, and are remunerated accordingly.

At Aramco, our people work on truly world-scale projects, supported by investment in capital and technology that is second to none. And because, as a global energy company, we are faced with addressing some of the world’s biggest technical, logistical and environmental challenges, we invest heavily in talent development.

We have a proud history of educating and training our workforce over many decades. Employees at all levels are encouraged to improve their sector-specific knowledge and competencies through our workforce development programs – one of the largest in the world.