Cybersecurity Risk Specialist

About the role

We are looking for an experienced Cybersecurity Risk Specialist to lead risk management across both IT and OT environments. The role involves assessing cyber risks, maintaining risk registers, and supporting governance initiatives to protect critical infrastructure.

Key responsibilities

• Conduct cybersecurity risk assessments following ISO/IEC 27005.
• Maintain and regularly update organizational risk registers.
• Perform vulnerability assessments and evaluate cybersecurity risks.
• Prepare risk, KRI/KPI, and global risk prediction reports.
• Track penetration‑testing findings and oversee remediation activities.
• Carry out vendor risk assessments.
• Support NCA cybersecurity risk and governance initiatives.

Required profile

• Bachelor’s degree in information security, IT, computer science or a related field.
• 5–7 years of experience in cybersecurity risk management.
• Experience with vulnerability assessment in IT/OT environments.
• Background in energy, oil & gas, manufacturing, utilities, industrial (OT/ICS) or government sectors.
• One or more certifications: CRISC, CISM, ISO/IEC 27005 Risk Manager.
• Professional proficiency in Arabic and English.

Required skills

• ISO/IEC 27005 risk assessment methodology
• Vulnerability assessment techniques
• IT/OT environment security
• Risk register management
• Penetration‑testing tracking and remediation
• Vendor risk assessment