Staff Engineer - Cyber Security

About Rasan Our journey began in 2016 when we realized the burning needs of KSA’s insurance sector. To fulfil the unmet needs in the market, we had to disrupt legacy approaches with technology needed for a digital age. Today, we are market leaders, committed to improving digital experiences for thousands of people and businesses every single day. Job Summary The Staff Engineer – Cyber Security provides operational coordination, governance support, and oversight across the organization's cybersecurity functions. The role serves as a key link between cybersecurity leadership, technical teams, and business stakeholders, ensuring that security initiatives, risk management activities, compliance requirements, and operational controls are effectively tracked, monitored, and reported. The position contributes to strengthening the organization's cybersecurity posture by supporting governance processes, driving accountability, and facilitating the successful execution of cybersecurity programs. Job Objectives - Ensure effective tracking and follow-up of cybersecurity operations, incidents, vulnerabilities, and remediation activities to support timely risk mitigation. - Support the implementation and monitoring of cybersecurity controls and improvement initiatives across technology environments. - Maintain compliance with applicable cybersecurity frameworks, regulatory requirements, and internal policies through effective governance and reporting. - Provide accurate and timely cybersecurity reporting, dashboards, and performance metrics to support management decision-making. - Facilitate coordination among technical teams, business stakeholders, vendors, and third parties to ensure successful execution of cybersecurity initiatives. - Support audit, assessment, and assurance activities by maintaining evidence, documentation, and remediation tracking. Job Responsibilities Cybersecurity Operations Coordination & Oversight - Follow up with technical teams on security operations activities, incidents, vulnerabilities, and remediation progress. - Monitor implementation of cybersecurity action plans and track completion against agreed timelines. - Support the deployment, operation, and effectiveness monitoring of cybersecurity technologies including SIEM, EDR, IAM, PAM, DLP, and WAF solutions. - Track security control implementation and identifying delays, risks, or operational issues requiring management attention. - Escalate unresolved issues, control gaps, and remediation delays to cybersecurity leadership Governance, Risk & Compliance Support - Support the development, maintenance, and periodic review of cybersecurity policies, procedures, standards, and related documentation. - Assist in cybersecurity compliance assessments and reviews against applicable frameworks and standards. - Support implementation and monitoring of internal controls and governance requirements. - Maintain and update cybersecurity risk registers, action plans, and remediation tracking records. - Monitor compliance-related activities and ensure identified gaps are tracked through resolution. Audit & Assurance Management - Support internal and external cybersecurity audits, assessments, and regulatory reviews. - Coordinate evidence collection, documentation preparation, and stakeholder responses for audit activities. - Track audit findings, recommendations, and corrective action plans to ensure timely closure. - Maintain audit records and ensure supporting documentation remains accurate and readily available. - Assist management in monitoring the status of compliance and assurance initiatives. Reporting, Stakeholder & Vendor Coordination - Prepare cybersecurity dashboards, reports, metrics, KPIs, and management presentations. - Coordinate with IT teams, business units, vendors, consultants, and third-party service providers on cybersecurity-related matters. - Facilitate communication between cybersecurity leadership and operational teams to ensure alignment on priorities and deliverables. - Support management reporting on cybersecurity risks, compliance status, incidents, and improvement initiatives. - Ensure cybersecurity documentation, records, and governance artifacts are maintained and periodically reviewed. Job Requirements Educational Qualification - Bachelor's degree in Cyber Security , Information Technology or related filed. Licenses & Certifications - CompTIA Security+ - ISO 27001 Foundation or Lead Implementer - CRISC (Certified in Risk and Information Systems Control) – Preferred Previous Work Experience - 4+ years of experience in cybersecurity, information security, or related fields. - Experience in cybersecurity governance, compliance, risk management, audit coordination, or security operations support roles. - Experience working with cybersecurity frameworks, regulatory requirements, and control monitoring activities is preferred. Skills and Abilities - Good understanding of cybersecurity principles

Bachelor's degree in Cyber Security, Information Technology or related field. 4+ years of experience in cybersecurity, information security, or related fields. Experience in cybersecurity governance, compliance, risk management, audit coordination, or security operations support roles. Certifications: CompTIA Security+; ISO 27001 Foundation or Lead Implementer. CRISC is preferred.

Cybersecurity Operations Coordination & Oversight: follow up with technical teams on security operations activities, incidents, vulnerabilities, and remediation progress; monitor implementation of cybersecurity action plans and track completion; support deployment, operation, and effectiveness monitoring of cybersecurity technologies including SIEM, EDR, IAM, PAM, DLP, and WAF; track security control implementation and identify delays or risks; escalate unresolved issues to cybersecurity leadership. Governance, Risk & Compliance Support: develop and maintain cybersecurity policies, procedures, standards and documentation; assist in cybersecurity compliance assessments; support internal controls and governance requirements; maintain risk registers, action plans and remediation tracking; monitor compliance-related activities. Audit & Assurance Management: support internal and external cybersecurity audits and regulatory reviews; coordinate evidence collection and responses; track audit findings and corrective actions; maintain audit records. Reporting, Stakeholder & Vendor Coordination: prepare dashboards, reports, KPIs; coordinate with IT, business units, vendors and third parties; facilitate communication between leadership and operational teams; support management reporting on risks, compliance status, incidents and improvements.