Cybersecurity Lead

About AZAQ:

We are a diversified business group with presence in a number of sectors including automotive and mobility, consumer goods, supply chain and logistics, industrial and technology solutions, real estate and financial services.

Job Summary:

Job Title:
Cyber Security Lead

Department:
IT Cybersecurity

Location:
Khobar, KSA

Job Purpose:

Responsible for defining, implementing, and governing the organization's IAM and PAM strategies. This role ensures secure and efficient management of digital identities, access controls, and privileged accounts across all systems and platforms in alignment with organizational, compliance, and risk management goals.

Job Responsibilities:

• Recommend improvements to departmental policy and directs the implementation of procedures and controls covering all related activities
• Suggest improvements in the current policies and procedures
• Create and maintain IAM/PAM policies, standards, and procedures to ensure compliance and consistency.
• Define and manage the IAM and PAM strategy, roadmap, and governance framework to establish a clear direction for identity and access management.
• Lead the implementation and continuous improvement of SailPoint and related IAM&PAM solutions to ensure secure, automated, and compliant management of user identities and access across the organization.
• Align IAM/PAM with business, compliance, and risk goals to ensure identity and access controls support organizational goals and regulatory requirements
• Promote Zero Trust, least privilege, and secure access principles across the organization to minimize security risks, prevent unauthorized access, and protect critical assets.
• Support internal and external audits, risk assessments, and compliance reviews to ensure IAM/PAM practices meet regulatory requirements
• Configure and maintain SailPoint IdentityIQ/IdentityNow for user lifecycle and access governance.
• Build and manage integrations with Active Directory, HR systems, and cloud platforms to ensure seamless identity lifecycle management
• Implement RBAC and ABAC models to ensure consistent, scalable, and secure access decisions that align with business roles and data sensitivity requirements.
• Run access certification campaigns and manage (SoD) controls to reduce the risk of unauthorized.
• Design and manage the PAM framework across systems and applications to secure privileged accounts through proper controls, access policies, and monitoring.
• Set up and maintain controls for password management, session monitoring, approvals, and just-in-time access to ensure least privilege and prevent misuse of privileged accounts.
• Monitor and report privileged activities to ensure compliance with internal policies and regulatory requirements and collaborate with infrastructure and application teams to maintain and improve PAM controls.
• Manage SSO, MFA, and federated identity solutions to provide secure, seamless, and user-friendly access to applications while strengthening authentication security across the organization.
• Use standards like SAML, OAuth, OpenID Connect, Kerberos, and LDAP to ensure secure, interoperable, and scalable authentication and authorization across systems and applications.
• Maintain AAA (Authentication, Authorization, Accounting) frameworks to ensure secure access controls, proper user accountability.
• Administer Active Directory, Azure AD, and Entra ID to ensure accurate user account management
• Automate access provisioning and deprovisioning to streamline identity lifecycle processes.

Desired Qualifications & Experience:

• Bachelor's degree in Computer Science, Information Security, or related field (Master's preferred).
• 9+ years of experience.
• Fluency in English is a must.
• Industry certifications such as CISSP, CCSP, ZTNA / SASE vendor certification (Netskope, Zscaler, Fortinet, etc.)