MonoSpear Technologies - IT Security Analyst - Vulnerability Assessment (2-3 yrs)

Experience : 2-3 Years.

Job Title : IT Security Analyst.

Position Type : Contractual (2 Years).

Location : Al Khobar, Dammam, Saudi Arabia.

Qualification : Bachelor's Degree in Computer Science, Information Security, or a related field.

Position Summary :

The ideal candidates will be responsible for developing, testing, and maintaining systems' security, analyzing operations, and integrating systems to enhance the organization's security posture.

The role involves working with ISO 27001 standards and ensuring compliance with NCA cybersecurity regulations.

This is a contractual position, and successful candidates will help protect the company's infrastructure and data by implementing effective security measures.

Key Responsibilities :

Security System Development & Maintenance :

- Develop, test, and maintain security systems to ensure confidentiality, integrity, and availability of the company's data and systems.

- Conduct regular vulnerability assessments and security audits to ensure all systems comply with industry best practices and security standards.

Risk Analysis & Incident Management :

- Perform security analysis to identify risks and mitigate potential vulnerabilities in integrated systems.

- Assist in the development and implementation of risk management processes, including incident response and remediation planning.

Compliance & Standards Adherence :

- Ensure security systems and protocols meet ISO 27001 standards.

- Monitor and maintain compliance with national cybersecurity regulations and industry standards.

Security Controls & Regulations :

- Assess security controls based on NCA cybersecurity principles and regulations.

- Continuously review security policies and procedures to ensure effectiveness and alignment with regulatory requirements.

System Design & Integration :

- Design and integrate hardware and software security solutions that meet the company's security needs.

- Recommend improvements to existing security infrastructure to enhance efficiency and security measures.

Training & Awareness :

- Provide support for training and raising awareness about security practices across the organization.

- Stay updated on emerging cybersecurity trends and technologies, and incorporate them into the company's security strategy.

Required Knowledge & Skills :

Knowledge of Cybersecurity :

- Understanding of the principles of cybersecurity, privacy laws, and best practices in securing systems and data.

- In-depth knowledge of encryption algorithms, their strengths, weaknesses, and appropriate selection criteria for different security requirements.

Networking & Access Management :

- Strong understanding of network access, identity and access management (IAM), and authentication protocols.

- Familiarity with firewalls, VPNs, IDS/IPS, and other network security measures.

System Security Design :

- Proficient in designing integrated hardware and software security solutions.

- Knowledge of security system design tools, methods, and techniques to assess and mitigate threats.

Security Controls Assessment :

- Experience assessing security controls based on NCA cybersecurity principles and regulations.

- Knowledge of vulnerability management and conducting risk assessments in IT environments.

Qualifications & Experience :

- Bachelor's degree in Computer Science, Information Security, or a related technical field.

- At least 2-3 years of experience in IT security, with a focus on ISO 27001 implementation.

- Hands-on experience with security tools such as firewalls, anti-malware software, SIEM systems, and encryption technologies.

- Experience in assessing, implementing, and managing security controls and policies.

Behavioral Skills :

- Strong problem-solving and analytical skills.

- Excellent communication and teamwork abilities.

- Proactive, dependable, and adaptable to new security technologies and challenges.

- Ability to work under pressure and prioritize tasks effectively.