IBM
Digital Security Senior Managing Consultant – Cloud Security & IAM
- Permanent
- Riyadh, Saudi Arabia
- Experience 10 - 15 yrs
Job expiry date: 18/04/2026
Job overview
Date posted
04/03/2026
Location
Riyadh, Saudi Arabia
Salary
Undisclosed
Compensation
Job description
The Digital Security Senior Managing Consultant is responsible for assessing and developing customer relationships, leading security design and implementation of digital security services for clients in KSA, with a strong focus on Cloud Security, Identity and Access Management (IAM), and securing cloud workloads across private, public, hybrid, and multi-cloud environments. The role requires demonstrating thought leadership, delivery expertise, and comprehensive understanding of cloud native and hybrid/3rd party security controls deployed across major hyperscalers including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform. The consultant engages with clients at early stages to understand business needs from a Cybersecurity perspective, applying industry knowledge and leveraging appropriate business and Cybersecurity elements to design secure solutions aligned with risk appetite, legal, regulatory, and compliance drivers. Responsibilities include architecting and delivering cloud security solutions across IaaS, PaaS, and SaaS service models, adopting agile approaches and leveraging Infrastructure as Code (IaC) to automate infrastructure security. The role involves conducting security architecture and configuration reviews using Zero Trust Security principles, identifying security gaps, and producing high-quality assessment and security design documentation. The consultant works with compliance and security standards including KSA NCA ECC, CSA CSM, PCI DSS, ISO 27001, NIST, CIS, and ISO/IEC 27018, ensuring regulatory alignment within hybrid and multi-cloud models. The position includes creating and delivering Cloud & Data Security and IAM proposals, managing large-scale and multi-year security transformation programs, responding to RFPs, and establishing strong client relationships to grow the Security Services portfolio. The role also requires experience in international deployment, collaboration across global and local teams, and readiness to travel 25–50%, while contributing to offering development and capability building within the practice.
Required skills
Key responsibilities
- Lead end-to-end delivery of digital security solutions by managing consulting engagements, facilitating workshops, delivering presentations, producing high-quality deliverables, and overseeing large-scale Cloud Security and IAM transformation programs across hybrid and multi-cloud environments.
- Assess client Digital Security Posture including risk appetite, legal, regulatory, and compliance drivers, and design Cloud Security, Data Protection, and Identity and Access Management (IAM) solutions aligned with KSA NCA ECC, PCI DSS, ISO 27001, NIST, CIS, CSA CSM, and ISO/IEC 27018 standards.
- Architect and implement cloud native and hybrid security controls across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform, covering IaaS, PaaS, and SaaS service models and securing cloud workloads in private, public, hybrid, and multi-cloud deployments.
- Conduct security architecture and configuration reviews using Zero Trust Security principles to identify security gaps, develop high-quality assessment reports, and produce comprehensive security project design documentation.
- Create and deliver Cloud & Data Security and IAM proposals, support RFP responses, define functional and non-functional requirements, and design solutions that meet administrative, operational, and technical client requirements.
- Adopt agile delivery methodologies and leverage Infrastructure as Code (IaC) to automate infrastructure security, enhance deployment models, and standardize cloud security blueprints and cloud native delivery methods.
- Collaborate with global and local teams to structure project approaches, resolve program issues with senior leadership, facilitate cross-functional solution development, and mentor consulting and technical teams in security architecture best practices.
- Establish and strengthen client relationships within key accounts to expand the Security Services portfolio, contribute to offering development, build capability models for Cloud Security and IAM domains, and serve as a trusted advisor on hybrid/multi-cloud security transformation initiatives.
Experience & skills
- Obtain a Bachelor’s Degree and maintain Cloud Certification for at least one hyperscaler such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform, with security specialist certifications preferred, along with at least one leading security certification such as CISA, CISSP, or CISM.
- Demonstrate at least 10 years of overall experience across IT and Cyber Security, including at least 8 years in security consulting and/or architecture roles and at least 5 years in international deployment roles supporting hybrid and multi-cloud security engagements.
- Show extensive experience delivering large-scale, complex, and multi-year security transformation programs in roles such as cloud security architect or senior delivery/technical lead, managing diverse teams and complex stakeholder environments.
- Exhibit strong expertise in Cloud Security, Identity and Access Management (IAM), Data Protection, and Cloud Security Solutions, including architecting and securing IaaS, PaaS, and SaaS service models across major hyperscalers.
- Demonstrate working experience with industry compliance and security standards including KSA NCA ECC, CSA CSM, PCI DSS, ISO 27001, NIST, CIS, and ISO/IEC 27018, and apply these frameworks within hybrid cloud architectures.
- Apply practical experience conducting security architecture and configuration reviews using Zero Trust Security principles, producing high-quality assessment reports, and developing detailed security design documentation.
- Demonstrate solid understanding of cloud architecture, cloud native delivery methods, security and deployment models, Infrastructure as Code (IaC), agile methodologies, and automation-driven infrastructure security practices.
- Maintain fluent English proficiency, readiness to travel 25–50%, ability to interlock with client stakeholders, facilitate workshops, manage large delivery engagements, and influence cross-functional teams in complex consulting environments.