Role Description The Cybersecurity Risk Specialist will be responsible for assessing, monitoring, and mitigating security risks across Brains Valley Company’s technology environment. This full-time, on-site role is based in Riyadh, Saudi Arabia and involves collaborating with cross-functional teams to identify vulnerabilities, evaluate controls, and recommend remediation strategies. Daily tasks include performing risk assessments on applications, networks, and information systems; reviewing security incidents and logs; and supporting the development and implementation of security policies, standards, and procedures. The role also involves preparing risk reports and dashboards for management, contributing to security awareness initiatives, and staying current with emerging threats, regulations, and best practices. The specialist will work closely with IT, compliance, and business stakeholders to ensure that security measures align with organizational objectives and regulatory requirements.
Qualifications & Requirements:
- Demonstrated expertise in Cybersecurity and Information Security, with the ability to assess, prioritize, and manage security risks.
- Bachelor's degree in Cybersecurity, Information Technology, or an equivalent field.
- Minimum 2 years of experience in cybersecurity risk management.
- Strong skills in Application Security, including secure software development practices, vulnerability assessment, and remediation guidance.
- Experience in Network Security, including firewall configurations, intrusion detection/prevention, and secure network architecture.
- Practical knowledge of broader Cyber domains, such as threat intelligence, incident response, and security monitoring.
- Proficiency in conducting risk assessments, developing risk mitigation plans, and presenting findings to technical and non-technical stakeholders.
- Familiarity with security frameworks and standards (e.g., ISO 27005, NIST, CIS Controls) and relevant regulatory requirements.
- Strong analytical, problem-solving, and documentation skills, with attention to detail and accuracy.
- Effective communication and collaboration skills, with the ability to work in cross-functional teams and an on-site environment.
- Bachelor’s degree in Computer Science, Information Security, or a related field; professional certifications such as CISSP, CISM, or CEH are an advantage.
- Experience in similar cybersecurity risk or security operations roles, preferably within large organizations or regulated industries.