Cybersecurity Specialist / Expert

About the role

We are seeking a seasoned Cybersecurity Specialist to lead the protection of our systems, data, and infrastructure while ensuring compliance with the Kingdom of Saudi Arabia's National Cybersecurity Authority (NCA) regulations. In this hands‑on position you will own the full cybersecurity lifecycle, from implementing controls to operating security platforms 24/7.

Key responsibilities

• Lead implementation of NCA regulatory frameworks (ECC, CSCC, CCC, DCC, TCC, OTCC) across all domains.
• Perform gap analyses, define remediation roadmaps, and validate control effectiveness.
• Prepare evidence for NCA self‑assessments, regulator reporting, and audits.
• Run end‑to‑end vulnerability management: scanning, prioritisation, remediation coordination, and SLA compliance.
• Conduct security testing – penetration tests, configuration reviews, and hardening assessments – pre‑go‑live and periodically.
• Operate and tune security platforms: SIEM, EDR/XDR, NGFW, IPS/IDS, WAF, email/web security, NAC, DLP.
• Monitor, detect, and respond to incidents, including triage, containment, forensics, and post‑incident reporting.
• Define and maintain security policies, standards, and procedures aligned with NCA, ISO 27001, NIST CSF, and CIS.
• Perform risk assessments for projects, third‑parties, and embed security into procurement and change management.
• Govern identity and access management: PAM, MFA, access recertification, and least‑privilege design.
• Deliver security awareness programmes and phishing simulations.

Required profile

• Several years of experience in cybersecurity, preferably in a leadership or specialist role.
• Deep knowledge of NCA Essential Cybersecurity Controls and related Saudi regulations.
• Proven ability to advise senior leadership on risk and to represent the organization before auditors and regulators.
• Strong analytical and problem‑solving skills with a proactive, security‑first mindset.

Required skills

• SIEM platforms
• EDR/XDR solutions
• Next‑generation firewalls (NGFW)
• IPS/IDS
• Web Application Firewall (WAF)
• Email and web security tools
• Network Access Control (NAC)
• Data Loss Prevention (DLP)
• Vulnerability management and scanning tools
• Penetration testing and configuration review techniques
• Secure baseline hardening assessments
• Identity and Access Management (IAM), Privileged Access Management (PAM), Multi‑Factor Authentication (MFA)
• Knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls