Summary
Rasan Information Technology is hiring a Staff Engineer - Cybersecurity in Riyadh to coordinate cybersecurity operations and support governance, risk, compliance, and audit activities. The role tracks incidents, vulnerabilities, remediation, security controls, and audit findings, and prepares dashboards, reports, and management updates. It also coordinates with technical teams, business stakeholders, vendors, and third parties. Applicants need a bachelor’s degree in Cyber Security, Information Technology, or a related field, and at least four years of relevant experience; CompTIA Security+ and ISO 27001 Foundation or Lead Implementer are listed, with CRISC preferred.
The posting
As published on rasan.co. Pulled from the employer's site and shown as they wrote it.
About Rasan
Our journey began in 2016 when we realized the burning needs of KSA’s insurance sector. To fulfil the unmet needs in the market, we had to disrupt legacy approaches with technology needed for a digital age. Today, we are market leaders, committed to improving digital experiences for thousands of people and businesses every single day.
Job Summary
The Staff Engineer – Cyber Security provides operational coordination, governance support, and oversight across the organization's cybersecurity functions. The role serves as a key link between cybersecurity leadership, technical teams, and business stakeholders, ensuring that security initiatives, risk management activities, compliance requirements, and operational controls are effectively tracked, monitored, and reported. The position contributes to strengthening the organization's cybersecurity posture by supporting governance processes, driving accountability, and facilitating the successful execution of cybersecurity programs.
Job Objectives
Ensure effective tracking and follow-up of cybersecurity operations, incidents, vulnerabilities, and remediation activities to support timely risk mitigation.
Support the implementation and monitoring of cybersecurity controls and improvement initiatives across technology environments.
Maintain compliance with applicable cybersecurity frameworks, regulatory requirements, and internal policies through effective governance and reporting.
Provide accurate and timely cybersecurity reporting, dashboards, and performance metrics to support management decision-making.
Facilitate coordination among technical teams, business stakeholders, vendors, and third parties to ensure successful execution of cybersecurity initiatives.
Support audit, assessment, and assurance activities by maintaining evidence, documentation, and remediation tracking.
Cybersecurity Operations Coordination & Oversight
Follow up with technical teams on security operations activities, incidents, vulnerabilities, and remediation progress.
Monitor implementation of cybersecurity action plans and track completion against agreed timelines.
Support the deployment, operation, and effectiveness monitoring of cybersecurity technologies including SIEM, EDR, IAM, PAM, DLP, and WAF solutions.
Track security control implementation and identifying delays, risks, or operational issues requiring management attention.
Escalate unresolved issues, control gaps, and remediation delays to cybersecurity leadership
Governance, Risk & Compliance Support
Support the development, maintenance, and periodic review of cybersecurity policies, procedures, standards, and related documentation.
Assist in cybersecurity compliance assessments and reviews against applicable frameworks and standards.
Support implementation and monitoring of internal controls and governance requirements.
Maintain and update cybersecurity risk registers, action plans, and remediation tracking records.
Monitor compliance-related activities and ensure identified gaps are tracked through resolution.
Audit & Assurance Management
Support internal and external cybersecurity audits, assessments, and regulatory reviews.
Coordinate evidence collection, documentation preparation, and stakeholder responses for audit activities.
Track audit findings, recommendations, and corrective action plans to ensure timely closure.
Maintain audit records and ensure supporting documentation remains accurate and readily available.
Assist management in monitoring the status of compliance and assurance initiatives.
Reporting, Stakeholder & Vendor Coordination
Prepare cybersecurity dashboards, reports, metrics, KPIs, and management presentations.
Coordinate with IT teams, business units, vendors, consultants, and third-party service providers on cybersecurity-related matters.
Facilitate communication between cybersecurity leadership and operational teams to ensure alignment on priorities and deliverables.
Support management reporting on cybersecurity risks, compliance status, incidents, and improvement initiatives.
Ensure cybersecurity documentation, records, and governance artifacts are maintained and periodically reviewed.
Educational Qualification
Bachelor's degree in Cyber Security , Information Technology or related filed.
Licenses & Certifications
CompTIA Security+
ISO 27001 Foundation or Lead Implementer
CRISC (Certified in Risk and Information Systems Control) – Preferred
Previous Work Experience
4+ years of experience in cybersecurity, information security, or related fields.
Experience in cybersecurity governance, compliance, risk management, audit coordination, or security operations support roles.
Experience working with cybersecurity frameworks, regulatory requirements, and control monitoring activities is preferred.
Skills and Abilities
Good understanding of cybersecurity principles, controls, risk management, and governance practices.
Knowledge of cybersecurity frameworks, compliance requirements, and industry standards.
Strong coordination, reporting, documentation, and stakeholder management skills.
Ability to understand and communicate technical cybersecurity matters at a business and management level.
Strong analytical, organizational, and follow-up capabilities with attention to detail.
Proficiency in preparing reports, dashboards, presentations, and tracking mechanisms.