IT Cybersecurity Specialist

Mission About The Company CAMCO – Capital Metro Company is a Saudi-French joint venture between RATP Dev and SAPTCO, responsible for the operation and maintenance of Riyadh Metro’s Blue and Red Lines. CAMCO plays a key role in operating one of the world’s largest fully automated metro networks. With more than 3,000 employees, our teams are at the heart of delivering safe, reliable and efficient metro services across Riyadh. Key Responsibilities • Endpoint and Network Security: • Implement and manage endpoint protection solutions, including antivirus, EDR, and DLP tools. • Maintain firewalls, intrusion detection/prevention systems, and other network security tools. • Configure and manage secure access solutions such as VPNs and identity management tools. • Identity and Access Management (IAM): • Manage user access, permissions, and roles across systems and applications. • Ensure adherence to least privilege principles and regularly review access controls. • Risk Assessment and Vulnerability Management: • Conduct regular vulnerability assessments and penetration testing on IT systems. • Prioritize and remediate identified vulnerabilities, coordinating with relevant teams. • Evaluate and document IT/OT risks, proposing appropriate mitigation strategies. • Security Monitoring and Incident Response: • Monitor networks, systems, and applications for security events and anomalies. • Investigate, document, and respond to cybersecurity incidents, ensuring swift containment and recovery. • Perform root cause analysis and develop recommendations to prevent future incidents. • Data Protection and Backup: • Implement and manage data encryption and other protection mechanisms for sensitive information. • Ensure robust data backup and recovery plans are in place and tested regularly. • Incident and Change Management: • Participate in the IT/OT change management process to assess the security impact of proposed changes. • Collaborate with other teams to maintain operational and cybersecurity alignment. • Conduct security audits, risk assessments, and compliance checks to identify gaps, recommend improvements, and ensure adherence to relevant regulations and industry standards. • Provide guidance and support to end-users regarding cybersecurity best practices, policies, and procedures. • Monitor and analyze security alerts, events, and trends to proactively identify potential threats and vulnerabilities. • Collaborate with external vendors and partners to assess and manage third-party security risks and ensure compliance with contractual obligations. • Assist in developing and delivering cybersecurity awareness and training programs for employees. • Stay informed about legal and regulatory changes related to cybersecurity and privacy and ensure the organization's compliance. Knowledge And Skills • Strong knowledge of cybersecurity tools and technologies (SIEM, IDS/IPS, firewalls, etc.). • Strong knowledge of cybersecurity principles, best practices, and frameworks (e.g., NIST Cybersecurity Framework, ISO 27001). • Proficient in forensic tools and techniques for investigating incidents • Familiarity with network security concepts, protocols, and technologies (e.g., VPN, DNS, IPsec, SSL/TLS). • Hands-on experience with scripting and automation for security tasks • Knowledge of cloud security principles and technologies (e.g., AWS, Azure, Google Cloud Platform). • Understanding of common cyber threats, attack vectors, and mitigation techniques. Qualifications • Bachelor’s degree in computer science, Information Security, or a related field. • Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security Professional (CISSP)) are a plus. Experience • 5+ years of experience in IT security or a similar role, with a focus on cybersecurity operations and incident response. • Experience with security monitoring and vulnerability assessment tools (e.g., SIEM, IDS/IPS, vulnerability scanners). Profile Main Purpose The IT Cybersecurity Specialist plays a crucial role in ensuring the security and integrity of CAMCO's information systems and data. This position is responsible for implementing, monitoring, and maintaining various cybersecurity measures, protocols, and technologies to protect the organization from internal and external threats. The IT Cybersecurity Specialist works closely with cross-functional teams to assess risks, develop security strategies, and implement solutions that align with industry best practices and regulatory requirements.

Bachelor’s degree in computer science, Information Security, or a related field. Relevant certifications (e.g., CompTIA Security+, CISSP) are a plus. 5+ years of experience in IT security or a similar role, with a focus on cybersecurity operations and incident response. Experience with security monitoring and vulnerability assessment tools (e.g., SIEM, IDS/IPS, vulnerability scanners).

Endpoint and Network Security: Implement and manage endpoint protection solutions, including antivirus, EDR, and DLP tools. Maintain firewalls, intrusion detection/prevention systems, and other network security tools. Configure and manage secure access solutions such as VPNs and identity management tools. Identity and Access Management (IAM): Manage user access, permissions, and roles across systems and applications. Ensure adherence to least privilege principles and regularly review access controls. Risk Assessment and Vulnerability Management: Conduct regular vulnerability assessments and penetration testing on IT systems. Prioritize and remediate identified vulnerabilities, coordinating with relevant teams. Evaluate and document IT/OT risks, proposing appropriate mitigation strategies. Security Monitoring and Incident Response: Monitor networks, systems, and applications for security events and anomalies. Investigate, document, and respond to cybersecurity incidents, ensuring swift containment and recovery. Perform root cause analysis and develop recommendations to prevent future incidents. Data Protection and Backup: Implement and manage data encryption and other protection mechanisms for sensitive information. Ensure robust data backup and recovery plans are in place and tested regularly. Incident and Change Management: Participate in the IT/OT change management process to assess the security impact of proposed changes. Collaborate with other teams to maintain operational and cybersecurity alignment. Conduct security audits, risk assessments, and compliance checks to identify gaps, recommend improvements, and ensure adherence to relevant regulations and industry standards. Provide guidance and support to end-users regarding cybersecurity best practices, policies, and procedures. Monitor and analyze security alerts, events, and trends to proactively identify potential threats and vulnerabilities. Collaborate with external vendors and partners to assess and manage third-party security risks and ensure compliance with contractual obligations. Assist in developing and delivering cybersecurity awareness and training programs for employees. Stay informed about legal and regulatory changes related to cybersecurity and privacy and ensure the organization's compliance.