Cybersecurity Risk Specialist

Brains Valley Company; Riyadh; On-site; SAR 180,000 - 280,000; Full time

Job summary

Brains Valley Company in Riyadh, Saudi Arabia, is seeking a Cybersecurity Risk Specialist to assess, monitor, and mitigate security risks across its technology environment. This on-site role requires collaboration with IT, compliance, and business stakeholders to ensure controls align with regulatory requirements and organizational objectives.

The ideal candidate has 2+ years in risk management, experience in incident response and security monitoring, and a strong foundation in cybersecurity and

Qualifications

• Experience assessing, prioritizing, and managing cybersecurity risks.
• Bachelor's degree in Cybersecurity, IT or related field.
• Minimum 2 years in cybersecurity risk management.
• Knowledge of ISO 27005, NIST, CIS Controls and regulatory requirements.
• Strong analytical, documentation, and reporting skills.
• Experience in incident response, threat intelligence, and security monitoring.

Responsibilities

• Perform risk assessments on applications, networks, and information systems.
• Review security incidents and logs to identify and remediate threats.
• Develop and implement security policies, standards, and procedures.
• Prepare risk reports and dashboards for management.
• Support security awareness initiatives and regulatory compliance.

Skills

Cybersecurity risk assessment

Information security

Analytical skills

Communication and collaboration

Regulatory compliance awareness

Security monitoring

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science / Information Security

Job description

Role Description

The Cybersecurity Risk Specialist will be responsible for assessing, monitoring, and mitigating security risks across Brains Valley Company’s technology environment. This full-time, on-site role is based in Riyadh, Saudi Arabia and involves collaborating with cross-functional teams to identify vulnerabilities, evaluate controls, and recommend remediation strategies. Daily tasks include performing risk assessments on applications, networks, and information systems; reviewing security incidents and logs; and supporting the development and implementation of security policies, standards, and procedures. The role also involves preparing risk reports and dashboards for management, contributing to security awareness initiatives, and staying current with emerging threats, regulations, and best practices. The specialist will work closely with IT, compliance, and business stakeholders to ensure that security measures align with organizational objectives and regulatory requirements.

Qualifications & Requirements:

• Demonstrated expertise in Cybersecurity and Information Security, with the ability to assess, prioritize, and manage security risks.
• Bachelor's degree in Cybersecurity, Information Technology, or an equivalent field.
• Minimum 2 years of experience in cybersecurity risk management.
• Strong skills in Application Security, including secure software development practices, vulnerability assessment, and remediation guidance.
• Experience in Network Security, including firewall configurations, intrusion detection/prevention, and secure network architecture.
• Practical knowledge of broader Cyber domains, such as threat intelligence, incident response, and security monitoring.
• Proficiency in conducting risk assessments, developing risk mitigation plans, and presenting findings to technical and non-technical stakeholders.
• Familiarity with security frameworks and standards (e.g., ISO 27005, NIST, CIS Controls) and relevant regulatory requirements.
• Strong analytical, problem-solving, and documentation skills, with attention to detail and accuracy.
• Effective communication and collaboration skills, with the ability to work in cross-functional teams and an on-site environment.
• Bachelor’s degree in Computer Science, Information Security, or a related field; professional certifications such as CISSP, CISM, or CEH are an advantage.
• Experience in similar cybersecurity risk or security operations roles, preferably within large organizations or regulated industries.