Information Security Associate / Senior Associate

Wisayah Investment Company; Dhahran Compound; In loco; SAR 180.000 - 270.000; Tempo pieno

Descrizione del lavoro

Wisayah Investment Company is seeking a Cybersecurity Specialist to protect information assets and strengthen security governance while supporting resilient business operations.

The role combines hands-on security operations with policy development, risk-based controls, and continuous monitoring to meet regulatory requirements and governance frameworks. You will collaborate with stakeholders and drive risk-based cybersecurity initiatives across the organization.

Competenze

• Bachelor’s degree in Cybersecurity, Computer Science, or a related discipline.
• More than 7 years of full-time experience in cybersecurity operations, information security, or a closely related technology risk role.
• Hands-on experience with monitoring, incident response, vulnerability management, and security controls.
• Strong working knowledge of cybersecurity frameworks, regulations, and industry standards.
• Ability to analyze security data, document findings clearly, and communicate cyber risks to both technical and non-technical stakeholders.
• Demonstrated experience supporting audits, regulatory compliance activities, and security reviews.
• CISM certification.
• CISSP certification.
• Strong organizational skills, attention to detail, and the ability to work effectively in a collaborative, fast-paced environment.

Mansioni

• Support cybersecurity operations by identifying, monitoring, and escalating cyber risks in line with organizational policies, regulatory requirements, and governance frameworks.
• Assist in the development, implementation, and maintenance of cybersecurity policies, standards, and procedures covering people, process, and technology.
• Monitor cybersecurity activities, including SOC alerts, threat intelligence feeds, and system logs, ensuring timely identification and response to security events.
• Support the investigation, analysis, and resolution of cybersecurity incidents, including documentation, root cause analysis, and post-incident reviews.
• Conduct regular security assessments, compliance reviews, and control testing to ensure adherence to internal policies and external regulations.
• Monitor and report on compliance with applicable cybersecurity frameworks and standards.
• Contribute to the delivery of risk-based cybersecurity solutions that balance security, usability, and operational efficiency.
• Develop clear security risk reporting and dashboards.
• Support process improvement, documentation, and automation initiatives.
• Build strong working relationships with business stakeholders, providing cybersecurity guidance that supports governance.

Conoscenze

Cybersecurity monitoring

Incident response

Vulnerability management

Security controls

Regulatory compliance

Audits

Data analysis

Stakeholder communication

Formazione

Bachelor’s degree in Cybersecurity, Computer Science, or related

Descrizione del lavoro

This role plays a critical role in protecting information assets, strengthening security governance, and supporting resilient business operations.

The Cybersecurity Specialist combines hands-on security operations with policy development, risk-based controls, and continuous monitoring.

Responsibilities

• Support cybersecurity operations by identifying, monitoring, and escalating cyber risks in line with organizational policies, regulatory requirements, and governance frameworks.
• Assist in the development, implementation, and maintenance of cybersecurity policies, standards, and procedures covering people, process, and technology.
• Monitor cybersecurity activities, including Security Operations Center (SOC) alerts, threat intelligence feeds, and system logs, ensuring timely identification and response to security events.
• Support the investigation, analysis, and resolution of cybersecurity incidents, including documentation, root cause analysis, and post-incident reviews.
• Conduct regular security assessments, compliance reviews, and control testing to ensure adherence to internal policies and external regulations.
• Monitor and report on compliance with applicable cybersecurity frameworks and standards.
• Contribute to the delivery of risk-based cybersecurity solutions that balance security, usability, and operational efficiency.
• Develop clear security risk reporting and dashboards.
• Support process improvement, documentation, and automation initiatives.
• Build strong working relationships with business stakeholders, providing cybersecurity guidance that supports governance.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or a related discipline.
• More than 7 years of full-time experience in cybersecurity operations, information security, or a closely related technology risk role.
• Hands-on experience with cybersecurity monitoring, incident response, vulnerability management, and security controls.
• Strong working knowledge of cybersecurity frameworks, regulations, and industry standards.
• Ability to analyze security data, document findings clearly, and communicate cyber risks to both technical and non-technical stakeholders.
• Demonstrated experience supporting audits, regulatory compliance activities, and security reviews.
• Professional certifications such as:
• CISM - Certified Information Security Manager
• CISSP - Certified Information Systems Security Professional
• Strong organizational skills, attention to detail, and the ability to work effectively in a collaborative, fast-paced environment.