IT Cybersecurity Specialist

CAMCO – Capital Metro Company is a Saudi-French joint venture between RATP Dev and SAPTCO, responsible for the operation and maintenance of Riyadh Metro’s Blue and Red Lines. CAMCO plays a key role in operating one of the world’s largest fully automated metro networks. With morethan 3,000 employees, our teams are at the heart of delivering safe, reliable and efficient metro services across Riyadh.

• 1. Endpoint and Network Security:
  • Implement and manage endpoint protection solutions, includingantivirus, EDR, and DLP tools.
  • Maintain firewalls, intrusion detection/prevention systems, and other network security tools.
  • Configure and manage secure access solutions such as VPNs and identity management tools.
• 2. Identity and Access Management (IAM):
  • Manage user access, permissions, and roles across systems and applications.
  • Ensure adherence to least privilege principles and regularly reviewaccess controls.
• 3. Risk Assessment and Vulnerability Management:
  • Conduct regular vulnerability assessments and penetration testing onIT systems.
  • Prioritize and remediate identified vulnerabilities, coordinating with relevant teams.
  • Evaluate and document IT/OT risks, proposing appropriate mitigation strategies.
• 4. Security Monitoring and Incident Response:
  • Monitor networks, systems, and applications for security eventsand anomalies.
  • Investigate, document, and respond to cybersecurity incidents,ensuring swift containment and recovery.
  • Perform root cause analysis and develop recommendations toprevent future incidents.
• 5. Data Protection and Backup:
  • Implement and manage data encryption and other protectionmechanisms for sensitive information.
  • Ensure robust data backup and recovery plans are in place andtested regularly.
• 6. Incident and Change Management:
  • Participate in the IT/OT change management process to assessthe security impact of proposed changes.
  • Collaborate with other teams to maintain operational andcybersecurity alignment.
• 7. Conduct security audits, risk assessments, and compliance checks to identify gaps, recommend improvements, and ensure adherence to relevant regulations and industry standards.
• 8. Provide guidance and support to end-users regarding cybersecurity best practices, policies, and procedures.
• 9. Monitor and analyze security alerts, events, and trends to proactively identify potential threats and vulnerabilities.
• 10. Collaborate with external vendors and partners to assess and managethird-party security risks and ensure compliance with contractual obligations.
• 11. Assist in developing and delivering cybersecurity awareness and training programs for employees.
• 12. Stay informed about legal and regulatory changes related tocybersecurity and privacy and ensure the organization's compliance.

• Strong knowledge of cybersecurity tools and technologies (SIEM, IDS/IPS, firewalls, etc.).
• Strong knowledge of cybersecurity principles, best practices, and frameworks (e.g., NIST Cybersecurity Framework, ISO 27001).
• Proficient in forensic tools and techniques for investigating incidents
• Familiarity with network security concepts, protocols, and technologies (e.g., VPN, DNS, IPsec, SSL/TLS).
• Hands-on experience with scripting and automation for security tasks
• Knowledge of cloud security principles and technologies (e.g., AWS, Azure, Google Cloud Platform).
• Understanding of common cyber threats, attack vectors, and mitigation techniques.

• Bachelor’s degree in computer science, Information Security, or a related field.
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security Professional (CISSP)) are a plus.

• 5+ years of experience in IT security or a similar role, with a focus on cybersecurity operations and incident response.
• Experience with security monitoring and vulnerability assessment tools (e.g., SIEM, IDS/IPS, vulnerability scanners).