Staff Engineer - Cyber Security

About the job

About Rasan

Our journey began in 2016 when we realized the burning needs of KSA’s insurance sector. To fulfil the unmet needs in the market, we had to disrupt legacy approaches with technology needed for a digital age. Today, we are market leaders, committed to improving digital experiences for thousands of people and businesses every single day.

Job Summary

The Staff Engineer – Cyber Security provides operational coordination, governance support, and oversight across the organization's cybersecurity functions. The role serves as a key link between cybersecurity leadership, technical teams, and business stakeholders, ensuring that security initiatives, risk management activities, compliance requirements, and operational controls are effectively tracked, monitored, and reported. The position contributes to strengthening the organization's cybersecurity posture by supporting governance processes, driving accountability, and facilitating the successful execution of cybersecurity programs.

Job Objectives

• Ensure effective tracking and follow-up of cybersecurity operations, incidents, vulnerabilities, and remediation activities to support timely risk mitigation.
• Support the implementation and monitoring of cybersecurity controls and improvement initiatives across technology environments.
• Maintain compliance with applicable cybersecurity frameworks, regulatory requirements, and internal policies through effective governance and reporting.
• Provide accurate and timely cybersecurity reporting, dashboards, and performance metrics to support management decision-making.
• Facilitate coordination among technical teams, business stakeholders, vendors, and third parties to ensure successful execution of cybersecurity initiatives.
• Support audit, assessment, and assurance activities by maintaining evidence, documentation, and remediation tracking.

Job Responsibilities

Cybersecurity Operations Coordination & Oversight

• Follow up with technical teams on security operations activities, incidents, vulnerabilities, and remediation progress.
• Monitor implementation of cybersecurity action plans and track completion against agreed timelines.
• Support the deployment, operation, and effectiveness monitoring of cybersecurity technologies including SIEM, EDR, IAM, PAM, DLP, and WAF solutions.
• Track security control implementation and identifying delays, risks, or operational issues requiring management attention.
• Escalate unresolved issues, control gaps, and remediation delays to cybersecurity leadership

Governance, Risk & Compliance Support

• Support the development, maintenance, and periodic review of cybersecurity policies, procedures, standards, and related documentation.
• Assist in cybersecurity compliance assessments and reviews against applicable frameworks and standards.
• Support implementation and monitoring of internal controls and governance requirements.
• Maintain and update cybersecurity risk registers, action plans, and remediation tracking records.
• Monitor compliance-related activities and ensure identified gaps are tracked through resolution.

Audit & Assurance Management

• Support internal and external cybersecurity audits, assessments, and regulatory reviews.
• Coordinate evidence collection, documentation preparation, and stakeholder responses for audit activities.
• Track audit findings, recommendations, and corrective action plans to ensure timely closure.
• Maintain audit records and ensure supporting documentation remains accurate and readily available.
• Assist management in monitoring the status of compliance and assurance initiatives.

Reporting, Stakeholder & Vendor Coordination

• Prepare cybersecurity dashboards, reports, metrics, KPIs, and management presentations.
• Coordinate with IT teams, business units, vendors, consultants, and third-party service providers on cybersecurity-related matters.
• Facilitate communication between cybersecurity leadership and operational teams to ensure alignment on priorities and deliverables.
• Support management reporting on cybersecurity risks, compliance status, incidents, and improvement initiatives.
• Ensure cybersecurity documentation, records, and governance artifacts are maintained and periodically reviewed.

Job Requirements

Educational Qualification

• Bachelor's degree in Cyber Security , Information Technology or related filed.

Licenses & Certifications

• CompTIA Security+
• ISO 27001 Foundation or Lead Implementer
• CRISC (Certified in Risk and Information Systems Control) – Preferred

Previous Work Experience

• 4+ years of experience in cybersecurity, information security, or related fields.
• Experience in cybersecurity governance, compliance, risk management, audit coordination, or security operations support roles.
• Experience working with cybersecurity frameworks, regulatory requirements, and control monitoring activities is preferred.

Skills and Abilities

• Good understanding of cybersecurity principles, controls, risk management, and governance practices.
• Knowledge of cybersecurity frameworks, compliance requirements, and industry standards.
• Strong coordination, reporting, documentation, and stakeholder management skills.
• Ability to understand and communicate technical cybersecurity matters at a business and management level.
• Strong analytical, organizational, and follow-up capabilities with attention to detail.
• Proficiency in preparing reports, dashboards, presentations, and tracking mechanisms.