Information Security Associate / Senior Associate

About the Role

Wisayah Investment Company is seeking an Information Security Associate / Senior Associate to join their team in Dhahran, Eastern, Saudi Arabia. This full-time role is critical for protecting information assets, enhancing security governance, and supporting resilient business operations. The Cybersecurity Specialist will integrate hands-on security operations with policy development, risk-based controls, and continuous monitoring.

Key Responsibilities

• Support cybersecurity operations by identifying, monitoring, and escalating cyber risks in alignment with organizational policies, regulatory requirements, and governance frameworks.
• Assist in the development, implementation, and maintenance of cybersecurity policies, standards, and procedures covering people, processes, and technology.
• Monitor cybersecurity activities, including Security Operations Center (SOC) alerts, threat intelligence feeds, and system logs, to ensure timely identification and response to security events.
• Support the investigation, analysis, and resolution of cybersecurity incidents, including documentation, root cause analysis, and post-incident reviews.
• Conduct regular security assessments, compliance reviews, and control testing to ensure adherence to internal policies and external regulations.
• Monitor and report on compliance with applicable cybersecurity frameworks and standards.
• Contribute to the delivery of risk-based cybersecurity solutions that balance security, usability, and operational efficiency.
• Develop clear security risk reporting and dashboards.
• Support process improvement, documentation, and automation initiatives.
• Build strong working relationships with business stakeholders, providing cybersecurity guidance that supports governance.

Qualifications and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, or a related discipline.
• More than 7 years of full-time experience in cybersecurity operations, information security, or a closely related technology risk role.
• Hands-on experience with cybersecurity monitoring, incident response, vulnerability management, and security controls.
• Strong working knowledge of cybersecurity frameworks, regulations, and industry standards.
• Ability to analyze security data, document findings clearly, and communicate cyber risks to both technical and non-technical stakeholders.
• Demonstrated experience supporting audits, regulatory compliance activities, and security reviews.
• Professional certifications such as CISM – Certified Information Security Manager and CISSP – Certified Information Systems Security Professional.
• Strong organizational skills, attention to detail, and the ability to work effectively in a collaborative, fast-paced environment.

Work Environment

This is a full-time position based in Dhahran, Saudi Arabia. The role requires collaboration within a fast-paced environment, contributing to the protection of critical information assets.