Cyber Threat Resident Expert

Cipher | سايڤر; Riyadh; On-site; SAR 180,000 - 280,000; Full time

Job summary

Cipher | سايڤر is seeking an experienced cybersecurity professional in Riyadh to ensure IT and security operations align with internal policies and standards. The role involves assessing controls, tracking remediation, and coordinating incidents with the SOC provider to drive improvements.

Candidates should have at least five years of cybersecurity experience, relevant certifications, and fluency in Arabic and English.

Qualifications

• Minimum 5 years of experience in cybersecurity, including compliance and threat readiness activities.
• Bachelor's degree in cybersecurity, computer science, information systems, or related field.
• At least one recognized cybersecurity certification.
• Knowledge of vulnerability management, incident response, access management, and security hardening.

Responsibilities

• Ensure IT and cybersecurity operations comply with internal policies, standards, and procedures.
• Conduct periodic cybersecurity control assessments and track remediation of findings.
• Monitor vulnerability assessments and penetration testing findings, prioritize risks, and follow up on remediation.
• Coordinate cybersecurity incidents with the SOC provider and support incident reviews and lessons learned.
• Prepare weekly, monthly, and quarterly cybersecurity reports and support audit activities.

Skills

Cybersecurity experience

Compliance

Threat readiness

Communication

Reporting

Education

Bachelor's degree in Cybersecurity / related field

Tools

SIEM

EDR

Vulnerability scanning

Job description

• Ensure IT and cybersecurity operations comply with internal policies, standards, and procedures.
• Conduct periodic cybersecurity control assessments, maintain compliance evidence, and track remediation of findings.
• Monitor vulnerability assessment and penetration testing findings, prioritize risks, and follow up on remediation.
• Monitor cybersecurity threat advisories and coordinate recommended actions with relevant teams.
• Maintain incident response plans, playbooks, and escalation procedures.
• Coordinate cybersecurity incidents with the SOC provider and support incident reviews and lessons learned.
• Review IT changes and new projects to identify cybersecurity risks and define security requirements.
• Coordinate user and privileged access reviews and follow up on security tool findings.
• Support cybersecurity awareness initiatives, including phishing simulation campaigns.
• Prepare weekly, monthly, and quarterly cybersecurity reports and support audit activities.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.
• Minimum 5 years of experience in cybersecurity, including compliance and threat readiness activities.
• At least one recognized cybersecurity certification.
• Working knowledge of cybersecurity control frameworks, including NCA ECC, ISO/IEC 27001, and CIS Controls.
• Knowledge of vulnerability management, incident response, access management, and security hardening.
• Strong reporting, coordination, and communication skills.
• Fluency in Arabic and English, both written and spoken.

Preferred Qualifications

• Experience in an on-site or resident cybersecurity role, preferably with a government or education-sector client.
• Certifications such as CISSP, CISM, CISA, CRISC, CompTIA Security+, or ISO/IEC 27001 Lead Implementer / Lead Auditor.
• Hands-on experience with SIEM, EDR, and vulnerability scanning tools.
• Experience conducting cybersecurity tabletop exercises.