Senior Specialist - Cybersecurity Risk

Qiddiya Investment Company is seeking a knowledgeable and proactive Senior Specialist - Cybersecurity Risk to enhance our cybersecurity team. In this critical role, you will be responsible for identifying, assessing, and managing cybersecurity risks to protect our organization’s information assets. You will play a key part in implementing risk management frameworks, conducting risk assessments, and ensuring our security measures align with industry best practices.

Your expertise will contribute to developing strategies that mitigate risks and safeguard the integrity and confidentiality of our data.

Responsibilities

• Conduct comprehensive risk assessments and analyses to identify vulnerabilities within the organization’s information systems.
• Implement and monitor cybersecurity risk management policies and frameworks in line with organizational objectives and compliance requirements.
• Collaborate with IT and cybersecurity teams to develop and enforce risk mitigation strategies.
• Prepare detailed reports on cybersecurity risks and their potential impact on the organization’s operations.
• Review and analyze third-party vendor cybersecurity practices to ensure alignment with organizational standards.
• Stay current with evolving cybersecurity threats, regulations, and trends to enhance risk management efforts.
• Participate in security awareness and training programs aimed at promoting a culture of cybersecurity across the organization.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field.
• 4-6 years of experience in cybersecurity risk management or information security roles.
• Strong understanding of risk assessment methodologies and frameworks (e.g., NIST, ISO 27001).
• Experience with security metrics and reporting to drive informed decisions on risk management.
• Excellent analytical skills and attention to detail.
• Strong communication and collaboration abilities, with the capacity to work effectively with various stakeholders.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Risk Management Professional (CRMP) are a plus.

Benefits

Offering a comprehensive compensation and benefits package.