Cyber Risk Strategist — Secure IT & Compliance (Riyadh)

Brains Valley Company; Riyadh; On-site; SAR 180,000 - 280,000; Full time

Job summary

Brains Valley Company in Riyadh, Saudi Arabia, is seeking a Cybersecurity Risk Specialist to assess, monitor, and mitigate security risks across its technology environment. This on-site role requires collaboration with IT, compliance, and business stakeholders to ensure controls align with regulatory requirements and organizational objectives.

The ideal candidate has 2+ years in risk management, experience in incident response and security monitoring, and a strong foundation in cybersecurity and

Qualifications

• Experience assessing, prioritizing, and managing cybersecurity risks.
• Bachelor's degree in Cybersecurity, IT or related field.
• Minimum 2 years in cybersecurity risk management.
• Knowledge of ISO 27005, NIST, CIS Controls and regulatory requirements.
• Strong analytical, documentation, and reporting skills.
• Experience in incident response, threat intelligence, and security monitoring.

Responsibilities

• Perform risk assessments on applications, networks, and information systems.
• Review security incidents and logs to identify and remediate threats.
• Develop and implement security policies, standards, and procedures.
• Prepare risk reports and dashboards for management.
• Support security awareness initiatives and regulatory compliance.

Skills

Cybersecurity risk assessment

Information security

Analytical skills

Communication and collaboration

Regulatory compliance awareness

Security monitoring

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science / Information Security

Job description

Brains Valley Company in Riyadh, Saudi Arabia, is seeking a Cybersecurity Risk Specialist to assess, monitor, and mitigate security risks across its technology environment. This on-site role requires collaboration with IT, compliance, and business stakeholders to ensure controls align with regulatory requirements and organizational objectives.

The ideal candidate has 2+ years in risk management, experience in incident response and security monitoring, and a strong foundation in cybersecurity and