Cyber Security Specialist

Cybersecurity Specialist — Alkhorayef Group | Riyadh, Saudi ArabiaAlkhorayef Group is looking for a Cybersecurity Specialist to join our Cybersecurity function, protecting the Group's information assets and technology infrastructure across all our entities and sustaining compliance with NCA regulations.About the roleYou will operate the Group's security tooling day to day, support the vulnerability management lifecycle, contribute to incident response, and help maintain the evidence base behind our regulatory compliance — working across multiple operating companies in a genuinely varied environment. This is a strong second role for someone who has spent their first year or two in a SOC, a GRC team, or a vulnerability management function and wants broader exposure.Key responsibilitiesOperate the Group security tooling — SIEM, EDR, firewall, web filtering and email security consolesReview and triage security alerts daily, escalate confirmed threats, and track open alerts through to closureWork with IT Operations on detection tuning, log source coverage and false-positive reductionRun scheduled vulnerability scans across servers, endpoints, network devices and cloud workloadsRank findings by exploitability and business impact, follow up remediation with system owners, and verify fixes by rescanningSupport control self-assessments against the NCA Essential Cybersecurity Controls, CSCC where applicable, and ISO 27001, and help keep the cyber risk register currentAssist with compliance reporting against the NCA control set and with regulatory, internal and external auditsPerform first-line analysis of suspected incidents, contain them within approved playbooks, preserve evidence, and document the incident timelineContribute to post-incident reports covering root cause, impact and lessons identifiedProcess access requests to critical systems, administer MFA and privileged access management tooling, and support periodic user access reviewsReconcile joiner, mover and leaver activity with HR and IT records in line with NCA control 1-9-5Deliver the Group security awareness programme, run phishing simulation campaigns, and report completion metricsSupport vendor and cloud service provider security assessments against the Group's cybersecurity requirementsWhat we're looking forBachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field1–2 years of cybersecurity experience in security operations, vulnerability management, GRC, or incident handling — internships, co-op and Tamheer programmes countWorking knowledge of the NCA Essential Cybersecurity Controls (ECC) and familiarity with ISO 27001 or the NIST Cybersecurity FrameworkHands-on exposure to SIEM, EDR and vulnerability scanning toolsA professional certification such as CompTIA Security+, ISC2 CC, or equivalent is an advantageStrong written English and Arabic — you will produce reports read by both technical teams and management