Information Security Specialist

Job Description

Req Number: 18343BR

Position Description:
We are seeking an Information Security Specialist to join the Computer Security Administration Group which is part of the Corporate Security Services Division. This role will be located at our headquarters in Dhahran, Saudi Arabia.

The Computer Security Administration Group is responsible to fulfill mandated corporate computer security responsibilities by conducting computer security inquiries, managing Computer Security Liaison Program, reviewing corporate computer and information security policies and guidelines for approval of the Vice President of Safety and Industrial Security, promoting computer security incident prevention through consultations, presentations, Computer Security Liaison, coordination, or other appropriate means, providing computer and information and security expertise and consultation to many affiliate organizations, and performing computer security reviews for corporate information and communication facilities, as required.

Minimum Requirements:
As the successful candidate you will hold a Bachelor’s degree in Computer Engineering, Information Assurance or Computer Science from a recognized university.

You will have ten years’ experience in e-Crimes/Cyber Incident Investigations with an excellent knowledge in all aspects of information technology; including policy, e-crime investigative skills, assessing incidents damage, and physical computer review.

You must have a good knowledge of all SAP Access Controls and Roles, Active Directory and E-mail Exchange Server applications and IT supporting tools and websites.

You will also have attended multiple training courses on IT security including conducting e-Crime investigations, interviews and writing report investigations.

You will have the ability to communicate effectively, both orally and in written English.

Demonstrate abilities in problem analysis and resolution.

Possess excellent presentation skills.

Duties & Responsibilities:
You will be required to perform the following:

Perform computer/information security breaches investigations and support Corporate Security Division investigations.
Be a point of contact in times of urgency when a major incident is reported and lead necessary investigative activities.

Perform independently all investigative functions, including but not limited to review of reported breach incidents, evidence handling, data collecting, data analysis and indexing, investigation and writing report of investigations to send management.
Be technically competent to assist senior analysts in the review and problem solving of reported e-Crime investigations and ability to evaluate and assess damage or loss of confidential data.

Provide assistance to computer security analysis, Computer Security Liaison program analysts and other technical staff in support of Computer Security Administration operations.

Conduct computer security reviews, inquiries, feasibility studies, and prepare reports to management.

Review corporate computer and information security policies and guidelines.

Develop computer security incident prevention awareness activities like consultations, presentations, Computer Security Liaison coordination, or any other appropriate means.

About us:
Saudi Aramco’s Industrial Relations (IR) Business line is dedicated to building, maintaining and enhancing the relationships the Company develops with people and institutions inside the Kingdom and around the world. It is through the IR business line that the Company cares for the health, wellbeing and security of its employees and their families, maintains the high quality of life found in Company communities, operates the school system for the children of expatriate employees, and communicates with various audiences through a variety of media, including print publications, events, films and websites. Saudi Aramco operates one of the largest and most successful industrial and professional training programs on the planet to ensure that its employees are provided with the training they need to meet emerging challenges. The Company’s wide-ranging corporate citizenship activities, which focus on the areas of environmental protection, knowledge, community and the economy, are also the responsibility of the IR business line.