Senior Information Security Engineer

Responsibilities :

- Develop and implement information security policies, procedures, standards, and controls.

- Design and execute comprehensive security management plans across IT and OT environments.

- Establish and enforce security controls to protect data, privacy, and overall infrastructure.

- Implement and maintain cybersecurity programs and integrated security solutions to safeguard IT and OT systems from breaches, cyberattacks, and misuse.

- Conduct security risk assessments, identify vulnerabilities, and recommend solutions for mitigation.

- Monitor security threats and vulnerabilities across IT networks, OT systems .

- Design and implement secure architectures for IT and OT networks, ensuring proper segmentation, secure protocols, and vulnerability management in legacy systems.

- Ensure adherence to Saudi national cybersecurity standards, including NCA (National Cybersecurity Authority) regulations, SAMA frameworks, and ISO 27001/IEC 62443 for industrial security.

- Develop and manage backup and disaster recovery plans to ensure IT/OT service continuity in case of incidents or cyber threats.

- Enhance digital transformation security by work on initiatives and projects to improve security in IT and OT environments, ensuring the protection of digital and industrial systems from cyber threats and enhancing business continuity.

- Keep up with evolving cybersecurity trends and continuously update security infrastructure, policies, and defense strategies.

- Provide senior management with regular reports on security status, potential risks, and ongoing improvement plans.

- Perform any other related tasks assigned by the direct supervisor

Qualification and skills :

Education: Bachelors degree in Computer Science, Cybersecurity, or related field. Masters degree preferred.

Experience: 7+ years in cybersecurity, with 3+ years in OT/ICS environments (manufacturing, energy, or critical infrastructure).

Technical Skills:

Proficiency in IT and OT security tools (e.g., Nozomi Networks, Claroty), SIEM (Splunk/QRadar), and industrial firewall configurations.

Knowledge of Saudi cybersecurity regulations (NCA, SAMA) and global standards (ISO 27001, NIST).

Certifications: at least two certificate of the following: CISSP, CISM, ISA/IEC 62443, CDMP.

Soft Skills: Strong leadership, Arabic language proficiency (preferred), and ability to work in multicultural teams.

Preferred Qualifications

Experience in cement, heavy industry, or Middle Eastern manufacturing sectors.

Familiarity with SAP ERP security.

Knowledge of Arabic and Saudi labor laws/cultural norms.

SPCC is a leading cement manufacturer in Saudi Arabia, committed to innovation, sustainability, and excellence in the construction materials industry. With state-of-the-art facilities and a focus on reducing environmental impact, we aim to deliver high-quality products while supporting Saudi Arabias Vision 2030 through local partnerships and sustainable practices.

• Competitive salary, housing allowance, and transportation benefits.
• Comprehensive health insurance and retirement plans.
• Professional development opportunities and performance bonuses.

Submit your resume and a cover letter detailing your experience in supplier development within the cement or heavy manufacturing sector to[SPCC Careers Email/Portal]. Use the subject line:Supplier Development Specialist Application [Your Name].

Southern Province Cement Company is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

1. Highlightedindustry-specific requirements(raw materials, equipment, sustainability).
2. Emphasizedcompliance with Saudi Arabian regulationsand SPCCs sustainability goals (e.g., Vision 2030 alignment).
3. Added language preferences (Arabic/English) for effective local and international collaboration.
4. Focused onrisk mitigationrelevant to cement production (geopolitical, raw material shortages).