Cyber Security Specialist

About the Role

Orient Insurance KSA is seeking a Cyber Security Specialist to join their team in Riyadh, Saudi Arabia. This full-time role is crucial for protecting the company's information assets and digital insurance services. The specialist will implement cybersecurity controls, manage security risks, and ensure compliance with applicable Saudi regulatory requirements.

Key Responsibilities

• Implement and maintain cybersecurity policies, procedures, standards, and technical controls.
• Support compliance with applicable Authority of Insurance requirements, the Authority of Insurance Cyber Security Framework where applicable, and relevant National Cybersecurity Authority controls.
• Monitor security alerts and investigate suspicious activities in coordination with the Security Operations Center and service providers.
• Assess cybersecurity risks across insurance systems, customer portals, mobile applications, infrastructure, and cloud services.
• Coordinate vulnerability assessments and penetration testing; track remediation and verify closure.
• Review user access, privileged accounts, authentication controls, and periodic access recertification.
• Support security technologies, including firewalls, endpoint protection, security monitoring, and data loss prevention.
• Participate in incident investigation, containment, recovery, evidence preservation, and authorized regulatory reporting.
• Assess vendor and outsourcing security risks; support secure development, recovery testing, awareness training, and audit remediation.

Performance Indicators

• Timely alert investigation and escalation.
• Vulnerability remediation within approved timelines.
• Completion of access reviews.
• Closure of audit findings.
• Completion of security training and exercises.

Qualifications and Experience

Candidates for this role should possess 2-5 years of relevant experience in cybersecurity. The position requires a professional who can effectively implement and manage security controls, assess risks, and ensure compliance within a dynamic environment.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, within the insurance industry. The role involves working collaboratively with internal teams, including the Security Operations Center, and external service providers to maintain a robust cybersecurity posture.