Cybersecurity Specialist: Incident Response & Compliance

Alkhorayef Group; Riyadh; On-site; SAR 150,000 - 210,000; Full time

Job summary

Alkhorayef Group is seeking a Cybersecurity Specialist to protect information assets and technology infrastructure across our Saudi entities. You will operate security tooling daily, support the vulnerability lifecycle, contribute to incident response, and help sustain regulatory compliance with NCA regulations.

You will join a varied environment, collaborating with IT Operations and risk teams to improve detection, remediation, and governance across multiple operating companies in Riyadh.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field.
• 1–2 years of cybersecurity experience in security operations, vulnerability management, GRC, or incident handling—internships, co-op and Tamheer programmes count.
• Working knowledge of ECC, ISO 27001 or NIST Cybersecurity Framework.

Responsibilities

• Operate security tooling (SIEM, EDR, firewall, web filtering, email security consoles)
• Review and triage security alerts daily; escalate threats and track to closure
• Collaborate with IT Operations on detection tuning, log source coverage, and false positives
• Run scheduled vulnerability scans across servers, endpoints, network devices and cloud workloads
• Rank findings by exploitability and business impact; coordinate remediation with system owners
• Support self-assessments against ECC, CSCC, ISO 27001 and help maintain cyber risk register
• Assist with regulatory audits and compliance reporting against NCA control set
• Perform first-line analysis of suspected incidents; preserve evidence and document timelines
• Contribute to post-incident reports covering root cause and impact
• Process access requests to critical systems; manage MFA and privileged access tooling
• Coordinate joiner/mover/leaver activity with HR and IT records
• Deliver security awareness programmes and phishing simulations
• Support vendor and cloud service provider security assessments against group requirements

Skills

SIEM

EDR

Vulnerability Scanning

GRC

Incident Handling

Regulatory Compliance

Threat Analysis

Education

Bachelor's degree in Information Security or related field

Tools

SIEM software

EDR software

Vulnerability scanners

Job description

Alkhorayef Group is seeking a Cybersecurity Specialist to protect information assets and technology infrastructure across our Saudi entities. You will operate security tooling daily, support the vulnerability lifecycle, contribute to incident response, and help sustain regulatory compliance with NCA regulations.

You will join a varied environment, collaborating with IT Operations and risk teams to improve detection, remediation, and governance across multiple operating companies in Riyadh.