Cybersecurity Resilience Specialist

Brains Valley Company; Riyadh; On-site; SAR 180,000 - 280,000; Full time

Job summary

Brains Valley Company is seeking a Cybersecurity Resilience Specialist for a full-time, on-site role based in Riyadh, Saudi Arabia. You will monitor and enhance security posture, assess risks, implement controls, and drive resilience across applications, networks, and information systems.

Responsibilities include incident response, vulnerability coordination, policy development, and cross-functional collaboration to embed security into business processes.

Qualifications

• Bachelor-level degree in Cybersecurity or Information Security or related field.
• Minimum 2 years in cybersecurity management or equivalent.
• Proficiency in network security, firewalls, IDS/IPS, secure network design.
• Experience with application security, secure coding, and vulnerability mitigation.
• Knowledge of ISO 27001, NIST, CIS Controls and regional regulatory requirements.

Responsibilities

• Support cybersecurity resilience assessments and improvement initiatives.
• Identify and assess cybersecurity risks affecting critical systems and services.
• Assist in developing cybersecurity resilience and risk mitigation plans.
• Evaluate cybersecurity controls against regulatory requirements.
• Support incident preparedness and recovery coordination.
• Prepare resilience assessment reports and recommendations.

Skills

Cybersecurity

Information Security

Risk assessment

Security controls

Incident detection

Threat investigation

Regulatory standards

Stakeholder communication

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science

Job description

Role Description The Cybersecurity Resilience Specialist is a full-time, on-site role based in Riyadh, Saudi Arabia. The specialist will monitor and enhance the organization's security posture by assessing risks, implementing security controls, and ensuring resilience against emerging cyber threats. Day-to-day responsibilities include analyzing security events, managing incident response activities, coordinating vulnerability assessments, and supporting remediation efforts across applications, networks, and information systems. The role also involves developing and maintaining security policies and procedures, collaborating with cross-functional teams to integrate security into business processes, and preparing reports and recommendations for leadership. The specialist will contribute to security awareness initiatives and support compliance with relevant standards and regulatory requirements.

Qualifications

• Strong foundation in Cybersecurity and Information Security, with the ability to assess risks and design appropriate controls.
• Bachelor's degree in Cybersecurity, Information Technology, or an equivalent field.
• Minimum 2 years of experience in cybersecurity and cybersecurity management.
• Proficiency in Network Security, including firewalls, intrusion detection/prevention systems, and secure network architecture.
• Experience with Application Security, including secure coding practices, application testing, and mitigation of common vulnerabilities.
• Hands-on experience with cyber incident detection, response, and recovery, including log analysis and threat investigation.
• Knowledge of security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls) and regulatory requirements relevant to the region.ISO/IEC 27005 certification.
• Ability to analyze complex technical issues, prioritize risks, and communicate clearly with technical and non-technical stakeholders.
• Bachelor's degree in Computer Science, Information Security, or a related field; relevant certifications such as CISSP, CISM, CEH, or equivalent are an advantage.
• Experience working in enterprise or government environments and familiarity with resilience planning, business continuity, or disaster recovery is preferred.

Key Responsibilities:

• Support cybersecurity resilience assessments and improvement initiatives.
• Identify and assess cybersecurity risks affecting critical systems and services.
• Assist in developing cybersecurity resilience and risk mitigation plans.
• Evaluate cybersecurity controls against applicable regulatory requirements.
• Support cybersecurity incident preparedness and recovery coordination.
• Prepare cybersecurity resilience assessment reports and recommendations.