Cybersecurity Specialist

About the Role

The Cybersecurity Specialist at Alkhorayef Group will be responsible for managing and safeguarding the organization's information assets and technology infrastructure across various entities, ensuring compliance with NCA regulations. This role provides a broad exposure ideal for candidates with 1-2 years experience in SOC, GRC, or vulnerability management functions.

Key Responsibilities

• Operate security tools including SIEM, EDR, firewalls, web filtering, and email security consoles daily.
• Analyze and triage security alerts, escalate confirmed threats, and track issues through to resolution.
• Collaborate with IT Operations to fine-tune detection, enhance log coverage, and reduce false positives.
• Execute vulnerability scans on servers, endpoints, network devices, and cloud workloads.
• Assess vulnerability findings by exploitability and business impact, coordinate remediation efforts and verify fixes through rescanning.
• Support control self-assessments for NCA Essential Cybersecurity Controls, CSCC, and ISO 27001 while maintaining the cyber risk register.
• Assist with compliance reporting, including regulatory, internal, and external audit processes.
• Conduct primary analysis of suspected incidents, contain them per approved procedures, preserve evidence, and document timelines.
• Contribute to incident reports detailing root causes, impact, and lessons learned.
• Manage critical system access requests, administer MFA and privileged access management, and support user access reviews.
• Ensure synchronization of joiner, mover, and leaver activities with HR and IT records as per NCA control 1-9-5.
• Lead the security awareness program by managing phishing simulations and tracking completion metrics.
• Support security assessments of vendors and cloud service providers against the Group’s cybersecurity standards.

Qualifications and Experience

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or related disciplines.
• 1 to 2 years of relevant cybersecurity experience in areas such as security operations, vulnerability management, governance, risk and compliance, or incident management; including internships and cooperative programs.
• Knowledge of the NCA Essential Cybersecurity Controls and familiarity with ISO 27001 or NIST Cybersecurity Framework.
• Practical experience with SIEM, EDR tools, and vulnerability scanning solutions.
• Professional security certifications like CompTIA Security+, ISC2 CC, or equivalent are preferred.
• Proficient written communication skills in both English and Arabic, capable of producing detailed reports for technical and managerial stakeholders.