Cloud Security & Encryption Specialist

Location: On-site – Riyadh, Saudi Arabia Contract/engagement: Project-based managed cybersecurity services (13-month) Minimum experience: 8+ years Role Purpose Govern and improve the security posture of cloud environments and encryption controls, ensuring secure storage, processing, transmission, and monitoring of entity data. Key Responsibilities · Monitor cloud environments for compliance with approved security policies, standards, and architecture requirements. · Review the security posture of compute, storage, database, platform, and supporting cloud services. · Monitor cloud-security tools and dashboards, investigate suspicious activity, and coordinate response with cybersecurity teams. · Review CSPM findings, misconfigurations, exposed services, policy violations, and unauthorized deployments or Shadow IT. · Assess third-party cloud services and integrations and track remediation of cloud-security findings through closure. · Define and review encryption requirements for sensitive data at rest, in transit, and during processing. · Support governance of cryptographic controls, keys, certificates, and secure integrations in line with Ministry requirements. · Maintain cloud asset visibility, operational reports, risk status, and remediation accountability.

Monitor cloud environments for compliance with approved security policies, standards, and architecture requirements. Review the security posture of compute, storage, database, platform, and supporting cloud services. Monitor cloud-security tools and dashboards, investigate suspicious activity, and coordinate response with cybersecurity teams. Review CSPM findings, misconfigurations, exposed services, policy violations, and unauthorized deployments or Shadow IT. Assess third-party cloud services and integrations and track remediation of cloud-security findings through closure. Define and review encryption requirements for sensitive data at rest, in transit, and during processing. Support governance of cryptographic controls, keys, certificates, and secure integrations in line with Ministry requirements. Maintain cloud asset visibility, operational reports, risk status, and remediation accountability.