IT Security Specialist

Role overview

Gulf Payments Company is looking for an IT Security Specialist to support day-to-day cybersecurity operations in Riyadh. This role is focused on keeping security controls running effectively, supporting compliance needs, and helping the team respond to risks, incidents, and audit requirements in a regulated environment.

Key responsibilities

• Carry out daily cybersecurity operations while following the organization’s security policies and operational risk framework.
• Maintain and support PKI components and related systems on a routine basis.
• Check that technical changes and service implementations align with internal security rules and regulatory expectations.
• Flag possible cyber risks to senior colleagues during both implementation work and regular operations.
• Handle routine configuration updates and patching for security tools such as vulnerability scanners, endpoint protection, and SIEM platforms.
• Track the condition, performance, and logs produced by security controls.
• Watch security consoles and alerts, then escalate suspected threats or risks to the relevant team lead.
• Support the first stages of incident containment and triage according to incident response procedures.
• Run scheduled vulnerability assessments using approved tools and document the findings for remediation planning.
• Assist with security testing efforts, including penetration testing, and apply practical security guidance during system setup and configuration.
• Work with internal and external auditors by sharing the documentation and data needed for regulatory and industry compliance.
• Help close audit gaps and follow through on corrective actions.
• Prepare clear technical reports on monitoring activity, security tool condition, and incident support work.
• Stay current on emerging threats, attack methods, and new security technologies.
• Perform other operational security tasks as assigned.

Requirements

• 2 to 5 years of experience in IT security, ideally within payments, banking, or a related sector.
• Bachelor’s or master’s degree in Information Security, Computer Science, Engineering, or a related discipline.
• Strong understanding of security systems and operational security practices.
• Experience in security awareness, technical documentation, and problem-solving.
• Good communication skills, including the ability to work with others to identify risks and prevent repeat incidents.
• Strong organizational skills and the ability to manage time effectively.
• Ability to conduct technical research and work with initiative as part of a team.
• Certification in a specific security framework is desirable.
• Ability to explain technical information to non-technical colleagues is preferred.
• Project coordination skills, including handling multiple tasks and following up on action items, are preferred.
• Analytical thinking, attention to detail, and a strong drive to investigate data are preferred.

Additional information

This is a full-time onsite role based in Riyadh, Riyadh, Saudi Arabia. The posting does not mention salary, stipend, number of openings, start date, or application deadline.