Cyber Security Specialist

Job Purpose Protect the confidentiality, integrity, and availability of the Company’s information assets and digital insurance services by implementing cybersecurity controls, managing security risks, and supporting compliance with applicable Saudi regulatory requirements. Key Responsibilities • Implement and maintain cybersecurity policies, procedures, standards, and technical controls. • Support compliance with applicable Authority of insurance requirements, the Authority of insurance Cyber Security Framework where applicable, and relevant National Cybersecurity Authority controls. • Monitor security alerts and investigate suspicious activities with the Security Operations Center and service providers. • Assess cybersecurity risks across insurance systems, customer portals, mobile applications, infrastructure, and cloud services. • Coordinate vulnerability assessments and penetration testing; track remediation and verify closure. • Review user access, privileged accounts, authentication controls, and periodic access recertification. • Support security technologies, including firewalls, endpoint protection, security monitoring, and data loss prevention. • Participate in incident investigation, containment, recovery, evidence preservation, and authorized regulatory reporting. • Assess vendor and outsourcing security risks; support secure development, recovery testing, awareness training, and audit remediation. Qualifications and Experience • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline. • Minimum 3 years of cybersecurity experience, preferably in insurance or financial services. • Knowledge of applicable Saudi cybersecurity requirements, ISO/IEC 27001, and the NIST Cybersecurity Framework. • Practical experience in security monitoring, incident response, vulnerability management, and access controls. • Security+, CySA+, SSCP, or equivalent certification is preferred. Core Competencies Threat analysis, technical investigation, risk assessment, problem-solving, confidentiality, documentation, incident coordination, and effective Arabic and English communication. Key Performance Indicators Timely alert investigation and escalation; vulnerability remediation within approved timelines; completion of access reviews; closure of audit findings; and completion of security training and exercises.

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline. Minimum 3 years of cybersecurity experience, preferably in insurance or financial services. Knowledge of applicable Saudi cybersecurity requirements, ISO/IEC 27001, and the NIST Cybersecurity Framework. Practical experience in security monitoring, incident response, vulnerability management, and access controls. Security+, CySA+, SSCP, or equivalent certification is preferred.

Implement and maintain cybersecurity policies, procedures, standards, and technical controls. Support compliance with applicable Authority of insurance requirements, the Authority of insurance Cyber Security Framework where applicable, and relevant National Cybersecurity Authority controls. Monitor security alerts and investigate suspicious activities with the Security Operations Center and service providers. Assess cybersecurity risks across insurance systems, customer portals, mobile applications, infrastructure, and cloud services. Coordinate vulnerability assessments and penetration testing; track remediation and verify closure. Review user access, privileged accounts, authentication controls, and periodic access recertification. Support security technologies, including firewalls, endpoint protection, security monitoring, and data loss prevention. Participate in incident investigation, containment, recovery, evidence preservation, and authorized regulatory reporting. Assess vendor and outsourcing security risks; support secure development, recovery testing, awareness training, and audit remediation.