Cyber Security Specialist

About Alkhorayef Group

Alkhorayef Group is seeking a Cyber Security Specialist to join its Cybersecurity function in Riyadh, Saudi Arabia. This full-time role is essential for protecting the Group's information assets and technology infrastructure across all entities, ensuring compliance with NCA regulations.

Role Overview

The Cyber Security Specialist will be responsible for the day-to-day operation of the Group's security tooling, supporting the vulnerability management lifecycle, contributing to incident response, and maintaining the evidence base for regulatory compliance. This position offers exposure across multiple operating companies, providing a varied work environment suitable for individuals with 0-1 years of experience in a SOC, GRC team, or vulnerability management function.

Key Responsibilities

• Operate Group security tooling, including SIEM, EDR, firewall, web filtering, and email security consoles.
• Review and triage security alerts daily, escalating confirmed threats and tracking open alerts to closure.
• Collaborate with IT Operations on detection tuning, log source coverage, and false-positive reduction.
• Conduct scheduled vulnerability scans across servers, endpoints, network devices, and cloud workloads.
• Rank findings by exploitability and business impact, follow up on remediation with system owners, and verify fixes through rescanning.
• Support control self-assessments against NCA Essential Cybersecurity Controls (ECC), CSCC where applicable, and ISO 27001, and assist in maintaining the cyber risk register.
• Assist with compliance reporting against the NCA control set and support regulatory, internal, and external audits.
• Perform first-line analysis of suspected incidents, contain them using approved playbooks, preserve evidence, and document the incident timeline.
• Contribute to post-incident reports covering root cause, impact, and lessons identified.
• Process access requests to critical systems, administer MFA and privileged access management tooling, and support periodic user access reviews.
• Reconcile joiner, mover, and leaver activity with HR and IT records in line with NCA control 1-9-5.
• Deliver the Group security awareness program, run phishing simulation campaigns, and report completion metrics.
• Support vendor and cloud service provider security assessments against the Group's cybersecurity requirements.

Qualifications and Requirements

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field.
• Working knowledge of the NCA Essential Cybersecurity Controls (ECC) and familiarity with ISO 27001 or the NIST Cybersecurity Framework.
• Hands-on exposure to SIEM, EDR, and vulnerability scanning tools.
• A professional certification such as CompTIA Security+, ISC2 CC, or equivalent is an advantage.

Experience Level

This role is suitable for candidates with 0-1 years of relevant experience.

Work Environment

The position is full-time and based in Riyadh, Saudi Arabia, offering a varied environment across multiple operating companies within Alkhorayef Group.