Cyber Security Analyst

About the Company

Responsibilities

• ● Monitor the organization's networks, systems, and security tools to detect and respond to cybersecurity threats and suspicious activities.
• ● Perform continuous security monitoring and analysis using Security Information and Event Management (SIEM) and other cybersecurity solutions.
• ● Investigate security incidents, perform root cause analysis, and recommend corrective and preventive actions.
• ● Conduct vulnerability assessments and coordinate penetration testing activities.
• ● Monitor remediation efforts and ensure identified vulnerabilities are resolved within agreed timelines.
• ● Implement and maintain endpoint protection, firewalls, email security, web security, and other cybersecurity controls.
• ● Review system configurations and security settings to ensure compliance with cybersecurity best practices.
• ● Assist in developing, maintaining, and enforcing cybersecurity policies, standards, and procedures.
• ● Support identity and access management (IAM) activities, including user access reviews and privileged access controls.
• ● Ensure compliance with applicable cybersecurity regulations, standards, and internal policies.
• ● Participate in cybersecurity risk assessments and recommend mitigation plans.
• ● Prepare cybersecurity reports, dashboards, and risk assessments for management.
• ● Support disaster recovery and business continuity planning from a cybersecurity perspective.
• ● Conduct cybersecurity awareness and phishing simulation activities for employees.
• ● Collaborate with internal departments and external vendors to strengthen the organization's cybersecurity posture.
• ● Stay informed about emerging cyber threats, vulnerabilities, and industry best practices.
• ● Participate in IT and cybersecurity projects to ensure security requirements are incorporated throughout the project lifecycle.
• ● Perform any other duties related to cybersecurity as assigned.
• ● Number of security incidents detected and resolved within SLA.
• ● Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• ● Percentage of vulnerabilities remediated within target timelines.
• ● Compliance with cybersecurity policies and regulatory requirements.
• ● Reduction in successful phishing attempts and security-related risks.
• ● Timely completion of security awareness initiatives.
• ● System security availability and effectiveness.
• ● Completion of periodic security assessments and audits.
• ● Accuracy and timeliness of cybersecurity reporting.

Requirements

• ● Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• ● CompTIA Security+
• ● Certified Ethical Hacker (CEH)
• ● Certified Information Systems Security Professional (CISSP)
• ● GIAC Certifications
• ● Microsoft Security Certifications
• ● ISO/IEC 27001 Lead Implementer or Lead Auditor (preferred)
• ● Minimum of 3-5 years of experience in cybersecurity, information security, or IT security.
• ● Experience in Security Operations Center (SOC), incident response, vulnerability management, or security monitoring is preferred.
• ● Experience within hospitality, real estate, or investment organizations is an advantage.
• ● Arabic and English