Cybersecurity Governance Specialist

Brains Valley Company; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Job summary

Brains Valley Company is seeking a Cybersecurity Governance Specialist to develop and implement governance policies and oversee compliance across the organization. This on-site role in Riyadh involves risk assessment coordination, audit support, and collaboration with IT and leadership to align controls with business objectives.

The ideal candidate will have a strong foundation in cybersecurity governance, a relevant bachelor's degree, 2+ years of experience, and the ability to communicate

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Engineering, or a related field.
• Minimum 2 years of experience in cybersecurity and cybersecurity management.
• Hands-on experience with Network Security and Application Security controls, including their implementation, monitoring, and continuous improvement.
• Experience with compliance and regulatory requirements related to information security (e.g., ISO 27001, NCA regulations, data protection frameworks).
• Ability to work collaboratively on-site in Riyadh, Saudi Arabia, with cross-functional teams and maintain professional ethics.

Responsibilities

• Develop, review, and maintain cybersecurity governance policies and procedures.
• Assess compliance with NCA ECC and relevant cybersecurity frameworks.
• Conduct cybersecurity governance and security control reviews.
• Review technical projects to identify cybersecurity risks and compliance gaps.
• Support implementation of NIST RMF requirements.
• Prepare governance reports, compliance assessments, and executive presentations.
• Coordinate with internal stakeholders to improve cybersecurity governance practices.

Skills

Governance frameworks

Policy development

Security awareness

Education

Bachelor's degree in Cybersecurity/Information Security/Computer Science

Tools

Network Security

Application Security

Job description

Role Description

The Cybersecurity Governance Specialist at Brains Valley Company will be responsible for developing, implementing, and maintaining cybersecurity policies, standards, and procedures across the organization. This full-time, on-site role in Riyadh, Saudi Arabia includes coordinating risk assessments, overseeing compliance with internal and external security requirements, and supporting audit activities. The specialist will collaborate with IT, business units, and leadership to align security controls with organizational objectives, monitor adherence to governance frameworks, and recommend improvements based on emerging threats and best practices. Daily activities include reviewing security documentation, tracking remediation plans, preparing reports and dashboards, and providing guidance and training to stakeholders on governance and security requirements.

Qualifications

• Strong foundation in Cybersecurity and Information Security, with the ability to apply governance frameworks, policies, and standards across the organization.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Engineering, or a related field.
• Minimum 2 years of experience in cybersecurity and cybersecurity management.
• Hands-on experience with Network Security and Application Security controls, including their implementation, monitoring, and continuous improvement.
• Ability to assess and manage cyber risk, including identifying threats, evaluating vulnerabilities, and supporting mitigation and incident response activities.
• Experience with compliance and regulatory requirements related to information security (e.g., ISO 27001, NCA regulations, data protection frameworks) is highly beneficial.
• Proficiency in documenting policies, procedures, and reports, and in communicating complex security concepts in clear, accessible language to diverse stakeholders.
• Strong analytical and problem-solving skills, attention to detail, and the ability to manage multiple priorities in a fast-paced environment.
• Bachelor’s degree in Information Security, Computer Science, or a related field; relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or equivalent are an advantage.
• Ability to work collaboratively on-site in Riyadh, Saudi Arabia, with cross-functional teams and maintain a high level of integrity and professional ethics.

Key Responsibilities:

• Develop, review, and maintain cybersecurity governance policies and procedures.
• Assess compliance with NCA ECC and relevant cybersecurity frameworks.
• Conduct cybersecurity governance and security control reviews.
• Review technical projects to identify cybersecurity risks and compliance gaps.
• Support implementation of NIST RMF requirements.
• Prepare governance reports, compliance assessments, and executive presentations.
• Coordinate with internal stakeholders to improve cybersecurity governance practices.