: To develop and implement a secure architecture framework for IT, OT, and cloud environments, ensuring compliance with Saudi cybersecurity regulations.
Responsibilities:
Develop and implement a secure architecture framework for IT, OT, and cloud environments.
Design robust access controls, authentication mechanisms, and privileged access management solutions to protect sensitive data.
Establish secure network designs, including firewalls, intrusion detection/prevention systems (IDS/IPS), and Zero Trust principles.
Develop security controls for cloud services (GCP) used for the Client's digital operations, ensuring data protection and regulatory compliance.
Develop Minimum Baseline Security Standards (MBSS) for applications in Client's environment, covering OS and DB layers.
Conduct security architecture reviews for new projects or existing systems.
Collaborate with stakeholders to ensure the implementation of cybersecurity controls before product release to production.
Provide deliverables to Client, such as Cybersecurity Architecture Framework and MSBs for technologies in PPT, Word, PDF, and Excel formats.
Qualifications
:
Extensive experience in cybersecurity architecture design, reviews, and baseline development.
Knowledge of diverse technologies, including payment systems, security solutions, cloud security, containerization technologies (e.g., Docker, Kubernetes).
Strong understanding of cybersecurity regulatory and compliance requirements (e.g., National Cybersecurity Authority (NCA) and international cybersecurity standards).
Strong communication skills for coordinating with stakeholders, conducting knowledge transfer sessions, and presenting findings.
Minimum of 10+ years of experience in cybersecurity architecture.