Information Security Associate / Senior Associate

Wisayah Investment Company; Dhahran Compound; On-site; SAR 180,000 - 300,000; Full time

Job summary

Wisayah Investment Company is seeking a Cybersecurity Specialist to protect information assets, strengthen security governance, and support resilient operations. The role blends hands-on security operations with policy development, risk-based controls, and continuous monitoring.

The candidate will identify and escalate cyber risks, develop security policies, monitor SOC alerts, and participate in incident investigations and regulatory compliance.

Qualifications

• Bachelor’s degree in Cybersecurity or CS.
• 7+ years in cybersecurity ops or tech risk roles.
• Hands-on monitoring, incident response, vulnerability management.
• Knowledge of frameworks, regulations, and standards.
• Ability to communicate cyber risks to varied audiences.

Responsibilities

• Identify, monitor, and escalate cyber risks per policies and governance.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Monitor SOC alerts, threat intel, and system logs.
• Investigate incidents with root-cause analysis and post-incident reviews.
• Conduct regular security assessments and control testing.
• Monitor compliance with cybersecurity frameworks and standards.
• Deliver risk-based cybersecurity solutions balancing security and operations.
• Develop clear security risk reporting and dashboards.
• Support process improvement, documentation, and automation.
• Engage stakeholders to provide cybersecurity guidance.

Skills

Cybersecurity ops

Incident response

Vulnerability management

Regulatory compliance

Education

Bachelor’s degree in Cybersecurity or CS

Job description

Role Description

This role plays a critical role in protecting information assets, strengthening security governance, and supporting resilient business operations.

The Cybersecurity Specialist combines hands‑on security operations with policy development, risk‑based controls, and continuous monitoring.

Responsibilities

• Support cybersecurity operations by identifying, monitoring, and escalating cyber risks in line with organizational policies, regulatory requirements, and governance frameworks.
• Assist in the development, implementation, and maintenance of cybersecurity policies, standards, and procedures covering people, process, and technology.
• Monitor cybersecurity activities, including Security Operations Center (SOC) alerts, threat intelligence feeds, and system logs, ensuring timely identification and response to security events.
• Support the investigation, analysis, and resolution of cybersecurity incidents, including documentation, root cause analysis, and post‑incident reviews.
• Conduct regular security assessments, compliance reviews, and control testing to ensure adherence to internal policies and external regulations.
• Monitor and report on compliance with applicable cybersecurity frameworks and standards.
• Contribute to the delivery of risk‑based cybersecurity solutions that balance security, usability, and operational efficiency.
• Develop clear security risk reporting and dashboards.
• Support process improvement, documentation, and automation initiatives.
• Build strong working relationships with business stakeholders, providing cybersecurity guidance that supports governance.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or a related discipline.
• More than 7 years of full-time experience in cybersecurity operations, information security, or a closely related technology risk role.
• Hands‑on experience with cybersecurity monitoring, incident response, vulnerability management, and security controls.
• Strong working knowledge of cybersecurity frameworks, regulations, and industry standards.
• Ability to analyze security data, document findings clearly, and communicate cyber risks to both technical and non‑technical stakeholders.
• Demonstrated experience supporting audits, regulatory compliance activities, and security reviews.
• Professional certifications such as:
• CISM – Certified Information Security Manager
• CISSP – Certified Information Systems Security Professional
• Strong organizational skills, attention to detail, and the ability to work effectively in a collaborative, fast‑paced environment.