Cyber Security Analyst

About the Role

Al Khozama Investment is seeking a Cyber Security Analyst to join their team in Riyadh. This full-time role is crucial for protecting the company's information assets, systems, networks, and digital infrastructure from cyber threats. The position involves monitoring security events, assessing vulnerabilities, implementing security controls, and responding to incidents to ensure compliance with cybersecurity regulations and support the overall cybersecurity strategy.

Key Responsibilities

• Monitor organizational networks, systems, and security tools to detect and respond to cybersecurity threats and suspicious activities.
• Perform continuous security monitoring and analysis using Security Information and Event Management (SIEM) and other cybersecurity solutions.
• Investigate security incidents, conduct root cause analysis, and recommend corrective and preventive actions.
• Conduct vulnerability assessments and coordinate penetration testing activities, monitoring remediation efforts to ensure timely resolution.
• Implement and maintain endpoint protection, firewalls, email security, web security, and other cybersecurity controls.
• Review system configurations and security settings to ensure compliance with cybersecurity best practices.
• Assist in developing, maintaining, and enforcing cybersecurity policies, standards, and procedures.
• Support identity and access management (IAM) activities, including user access reviews and privileged access controls.
• Ensure compliance with applicable cybersecurity regulations, standards, and internal policies.
• Participate in cybersecurity risk assessments and recommend mitigation plans.
• Prepare cybersecurity reports, dashboards, and risk assessments for management.
• Support disaster recovery and business continuity planning from a cybersecurity perspective.
• Conduct cybersecurity awareness and phishing simulation activities for employees.
• Collaborate with internal departments and external vendors to strengthen the organization's cybersecurity posture.
• Stay informed about emerging cyber threats, vulnerabilities, and industry best practices.
• Participate in IT and cybersecurity projects to ensure security requirements are incorporated throughout the project lifecycle.
• Perform any other assigned cybersecurity duties.

Key Performance Indicators

• Number of security incidents detected and resolved within SLA.
• Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• Percentage of vulnerabilities remediated within target timelines.
• Compliance with cybersecurity policies and regulatory requirements.
• Reduction in successful phishing attempts and security-related risks.
• Timely completion of security awareness initiatives.
• System security availability and effectiveness.
• Completion of periodic security assessments and audits.
• Accuracy and timeliness of cybersecurity reporting.

Experience and Qualifications

• 3-5 years of experience in a relevant cybersecurity role.
• Experience in Security Operations Center (SOC), incident response, vulnerability management, or security monitoring is preferred.
• Experience within hospitality, real estate, or investment organizations is an advantage.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, offering an opportunity to contribute to the cybersecurity posture of Al Khozama Investment.