Cybersecurity Risk Specialist

brains valley company; Saudi Arabia; On-site; SAR 180,000 - 280,000; Full time

Job summary

Brains Valley Company in Riyadh, Saudi Arabia, seeks a Cybersecurity Risk Specialist to assess, monitor, and mitigate security risks across the technology environment. This on-site, full-time role collaborates with IT, compliance, and business teams to implement robust risk controls and reporting.

You will perform risk assessments on apps, networks, and information systems, review incidents, and help develop security policies and dashboards for management.

Qualifications

• Minimum 2 years of experience in cybersecurity risk management.
• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• Strong skills in Application Security, including secure software development practices.
• Experience in Network Security, including firewall configurations and IDS/IPS.
• Familiarity with ISO 27005, NIST, CIS Controls and regulatory requirements.
• Excellent analytical, problem-solving, and documentation skills.
• Effective communication and collaboration with cross-functional teams in on-site environments.
• Bachelor’s degree in Computer Science or Information Security; CISSP/CISM/CEH are an advantage.
• Experience in similar cybersecurity risk or security operations roles in large orgs.

Responsibilities

• Assess, monitor, and mitigate security risks across the technology environment.
• Perform risk assessments on applications, networks, and information systems.
• Review security incidents and logs to identify gaps and improvements.
• Develop and implement security policies, standards, and procedures.
• Prepare risk reports and dashboards for management and stakeholders.
• Contribute to security awareness initiatives across the organization.
• Stay current with emerging threats, regulations, and best practices.
• Collaborate with IT, compliance, and business stakeholders to align security with objectives.

Skills

Cybersecurity risk management

Application Security

Network Security

Threat intelligence

Incident response

Security monitoring

Risk assessments

Regulatory & standards knowledge

Communication & collaboration

Education

Bachelor's degree in Cybersecurity / Information Technology

Bachelor's degree in Computer Science / Information Security

Job description

Role Description

The Cybersecurity Risk Specialist will be responsible for assessing, monitoring, and mitigating security risks across Brains Valley Company’s technology environment. This full-time, on-site role is based in Riyadh, Saudi Arabia and involves collaborating with cross-functional teams to identify vulnerabilities, evaluate controls, and recommend remediation strategies. Daily tasks include performing risk assessments on applications, networks, and information systems; reviewing security incidents and logs; and supporting the development and implementation of security policies, standards, and procedures. The role also involves preparing risk reports and dashboards for management, contributing to security awareness initiatives, and staying current with emerging threats, regulations, and best practices. The specialist will work closely with IT, compliance, and business stakeholders to ensure that security measures align with organizational objectives and regulatory requirements.

Qualifications & Requirements:

• Demonstrated expertise in Cybersecurity and Information Security, with the ability to assess, prioritize, and manage security risks.
• Bachelor's degree in Cybersecurity, Information Technology, or an equivalent field.
• Minimum 2 years of experience in cybersecurity risk management.
• Strong skills in Application Security, including secure software development practices, vulnerability assessment, and remediation guidance.
• Experience in Network Security, including firewall configurations, intrusion detection/prevention, and secure network architecture.
• Practical knowledge of broader Cyber domains, such as threat intelligence, incident response, and security monitoring.
• Proficiency in conducting risk assessments, developing risk mitigation plans, and presenting findings to technical and non-technical stakeholders.
• Familiarity with security frameworks and standards (e.g., ISO 27005, NIST, CIS Controls) and relevant regulatory requirements.
• Strong analytical, problem-solving, and documentation skills, with attention to detail and accuracy.
• Effective communication and collaboration skills, with the ability to work in cross-functional teams and an on-site environment.
• Bachelor’s degree in Computer Science, Information Security, or a related field; professional certifications such as CISSP, CISM, or CEH are an advantage.
• Experience in similar cybersecurity risk or security operations roles, preferably within large organizations or regulated industries.