Cyber & Information Security Specialist

About the role

The Cyber & Information Security Specialist will establish, manage and enforce system access controls and security systems to protect Riyad Bank’s IT assets. The role involves monitoring information security threats, performing risk assessments, and ensuring compliance with security policies across the bank.

Key responsibilities

• Analyze new and existing banking systems and applications for compliance with security policies and propose remediation solutions.
• Identify and recommend processes, tools, and techniques to enhance the bank’s protection against potential breaches.
• Monitor and support the implementation of security tools to ensure alignment with security standards.
• Develop analytical reports on security compliance and present findings to management.
• Conduct security enforcement reviews for existing and newly implemented systems.
• Document security enforcement rules across all IT layers (applications, databases, infrastructure, endpoints).
• Maintain up‑to‑date records of security controls and assess the effectiveness of security policies.
• Provide guidance to project teams on implementing security controls and complying with standards.
• Enforce vulnerability management practices in line with the bank’s policies.

Required profile

• Strong understanding of security policies, standards and baseline security controls.
• Ability to assess business and technical requirements and propose compliant security solutions.
• Experience in guiding project teams on security implementation.
• Knowledge of vulnerability management processes.

Required skills