Cyber Security

AtkinsRéalis is looking for a **Cyber Security & Resilience Consultant**in** Riyadh, KSA.**

**About AtkinsRéalis**

We are seeking an experienced Cyber Security & Resilience Consultant with a strong background in cyber security, risk management, and business resilience to support projects in the Kingdom of Saudi Arabia. The role involves advising government entities, critical infrastructure providers, and private organizations on enhancing their cyber resilience, compliance, and incident preparedness in line with Saudi regulations (NCA, SAMA, CITC, etc.) and global standards.

**Responsibilities**:

- Develop and implement cyber resilience strategies, frameworks, and roadmaps tailored to client needs and aligned with NCA ECC/OTCC, SAMA, CITC, ISO 27001, NIST, and other regional/global standards.
- Conduct cyber risk assessments, maturity assessments, and gap analyses to identify vulnerabilities and resilience gaps.
- Support clients in incident response planning, crisis management, and recovery strategies, ensuring business continuity in case of disruptions.
- Advise on regulatory compliance with Saudi-specific frameworks such as NCA ECC, SAMA Cyber Security Framework, CITC Cloud Regulations, and sectoral guidelines.
- Lead cyber resilience workshops, tabletop exercises, and awareness sessions for client stakeholders and leadership teams.
- Collaborate with IT, OT, and business teams to design integrated resilience solutions for critical national infrastructure projects.
- Provide strategic input on cyber resilience in smart cities, mega-projects, and digital transformation initiatives within KSA.
- Develop policies, standards, and operating procedures covering cyber resilience, business continuity, and disaster recovery.
- Contribute to proposals, thought leadership, and market growth activities within the Saudi cyber security domain.

**Requirements**:

- 3-5 years of experience in cyber security, risk management, or resilience consulting (preferably within the GCC / KSA market).
- Proven track record in cyber resilience, business continuity management, disaster recovery, and incident response planning.
- Strong understanding of Saudi regulatory frameworks: NCA, SAMA, CITC, MCIT, etc.
- Knowledge of global standards and frameworks: ISO 22301, ISO 27001, ISO 27005, IEC 62443, NIST CSF, COBIT, ITIL, MITRE ATT&CK.
- Experience with critical infrastructure, financial services, government, or mega-project sectors is highly desirable.
- Excellent stakeholder management and communication skills; ability to engage senior government
- and corporate executives.
- Relevant certifications preferred: CISSP, CISM, CRISC, ISO 22301 Lead Implementer, ISO 27001 Lead Implementer/Auditor, CBCI, CEH or equivalent.
- Bilingual (Arabic & English) preferred but not mandatory.

**Why choose AtkinsRéalis?**
- Tax-free salary.
- Comprehensive life insurance coverage.
- Premium medical insurance coverage for you and your dependents.
- Generous annual leave balance.
- Remote work opportunities outside of country.
- Flexible/hybrid work solutions.
- Company gratuity scheme.
- Discretionary bonus program.
- Annual flight contribution.
- Relocation assistance.
- Transportation & housing allowances: Available for remote work locations.
- Employee Wellbeing Program: 24/7 access to specialists in finance, legal matters, family care, as well as personal health, fitness, and nutrition consulting.

**Your difference makes a difference.** We care for our people and are committed to creating an inclusive working environment where you can thrive and build a future you want to be a part of.

AtkinsRéalis is committed to eliminating discrimination and encouraging diversity amongst our workforces. We aim to provide quality and fairness for all job applicants and employees and not to discriminate on grounds of gender, marital status, age, race, ethnic origin, religious conviction, or disablement. We oppose all forms of unlawful treatment and discrimination.

**We pursue this commitment by**:

- Having clear and concise procedures and guidelines for both line managers and employees to ensure policies are fully understood and implemented.
- Complying with the relevant employment legislation and codes of practice.
- Ensuring that all existing employees, potential employees, colleagues, and customers are treated equally and with respect.