Cyber Security SME

As a Cyber Security SME, you will play a hands-on role in the day-to-day operation, support, and continuous improvement of cybersecurity controls. You will contribute to the implementation, enhancement, and optimisation of security solutions across the organisation, ensuring cyber capabilities remain effective, resilient, and aligned with business needs.

Cyber Security Operations Engineering

• Operate, support, and continuously improve enterprise cybersecurity controls.
• Respond to incidents, lead investigations, and support remediation activities.
• Execute security-related change deployments in line with governance processes.
• Maintain operational stability across infrastructure, networking, and security tooling.

Domain Expertise

• Provide hands-on expertise across network, endpoint, email, web, and proxy security.
• Design, implement, configure, and manage cybersecurity technologies across on-prem, cloud, and hybrid environments.
• Operate and maintain solutions throughout their lifecycle (onboarding, upgrades, optimisation, decommissioning).
• Manage vulnerability remediation programmes, including assessment, prioritisation, and validation.
• Integrate cybersecurity tools with enterprise infrastructure, cloud services, and identity platforms.

Governance Assurance

• Act as a key contact for audit, IT risk, and governance teams.
• Ensure alignment with regulatory frameworks (ISO 27001, SAMA, SWIFT CSCF, CIS, NIST).
• Conduct control reviews, compliance assessments, and assurance exercises.
• Document risks, mitigations, and provide SME-level guidance across engineering and BAU operations.

Monitoring Continuous Improvement

• Analyse telemetry, logs, alerts, and dashboards to identify gaps and deficiencies.
• Drive continuous improvement in monitoring, incident investigation, and remediation.
• Provide operational metrics and reporting to stakeholders.

Experience

• You have 8+ years of experience in cyber or information security roles.
• You have strong experience across enterprise cybersecurity domains and operations.
• You have experience collaborating with audit, risk, and compliance stakeholders.

Technical Expertise

• You have strong secondary-level education in a technical or analytical discipline (A-level or equivalent).
• You have a qualification in Cyber Security, IT, or Risk Management (advantageous).
• You have strong technical experience in Windows Server and Linux environments.
• You have deep understanding of infrastructure, networking, and operating systems.
• You have hands-on experience with enterprise cybersecurity tools.
• You have knowledge of regulatory frameworks (ISO 27001, CIS, NIST).
• You have proficiency in troubleshooting integrated systems (AD, DNS, GPO, networked assets).
• You have exposure to scripting/automation (Python, Ansible, PowerShell).
• You have familiarity with cloud platforms (Azure, AWS) or virtualised environments (VMware) (preferred).
• You have knowledge of ServiceNow ITSM and security frameworks such as CIS Benchmarks or NIST 800-53 (preferred).

Ways of Working

• You communicate effectively with technical and non-technical audiences.
• You collaborate across multiple teams and vendors to deliver outcomes.
• You balance operational stability with continuous improvement.
• You act with integrity, resilience, and accountability in fast-paced environments.