Cyber Security Specialist

About Flooss

AL-AN Alkhaligia for Consumer Microfinance Company (Flooss) provides consumer microfinance solutions within Saudi Arabia. Operating in the regulated financial sector, Flooss is supervised by the Saudi Central Bank (SAMA). The company is building a customer-focused, technology-enabled, and well-governed organization.

The Role of Cyber Security Specialist

Flooss is seeking a Cyber Security Specialist to support the company's cybersecurity function. This full-time role, based in Riyadh, Saudi Arabia, involves protecting information assets, customer data, and digital services. The specialist will implement and monitor security controls, respond to incidents, and support compliance with SAMA and other applicable regulatory requirements. The Cyber Security Specialist will report to the Chief Information Security Officer (CISO).

Key Responsibilities

• Monitor security alerts and events from SIEM, endpoint protection, and other security tools, whether in-house or through an outsourced Security Operations Center (SOC).
• Investigate and triage security incidents, supporting containment, eradication, and recovery activities.
• Document incidents and assist in preparing incident reports for management and regulators as required.
• Follow up on threat intelligence and assess its relevance to the company's environment.
• Conduct regular vulnerability scans and track remediation with the IT team and vendors.
• Coordinate penetration tests and follow up on the closure of findings.
• Review security configurations of servers, networks, cloud services, and endpoints against approved baselines.
• Support security reviews of new systems, changes, and integrations before go-live.
• Review user access rights and privileged accounts periodically.
• Monitor privileged access activity and report anomalies.
• Support the implementation of access control policies, including multi-factor authentication and least-privilege principles.
• Support compliance with the SAMA Cyber Security Framework, NCA Essential Cybersecurity Controls, and the Personal Data Protection Law (PDPL).
• Help maintain cybersecurity policies, standards, and procedures.
• Support cybersecurity risk assessments and maturity self-assessments.
• Prepare evidence for internal audits and regulatory examinations, and track remediation of findings.
• Support cybersecurity assessments of third parties and vendors.
• Support cybersecurity awareness programs, including phishing simulations and employee training.
• Prepare periodic reports and key metrics on the company's cybersecurity posture for the CISO.
• Maintain accurate documentation of security tools, configurations, and procedures.

Required Experience

• Candidates should have 2-5 years of experience in a relevant field.

Collaboration and Reporting

The Cyber Security Specialist will work closely with the IT team, Risk, Compliance, and technology vendors, reporting directly to the Chief Information Security Officer (CISO).