search Browse Jobs
Cybersecurity Risk Specialist / Consultant- KSADiyar United Company · Riyadh, Saudi Arabia
Diyar United Company logo

Diyar United Company

company page ↗

Cybersecurity Risk Specialist / Consultant- KSA

🗓️ Posted 2026-10-12 Riyadh, Saudi Arabia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market SAR 12,000–SAR 22,000/mo

About the Company

- The Official Account Of Diyar United Company International Quality , Delivered by Local Professionals Since its inception in 1980, Diyar United has been in the business of providing innovative Information Technology solutions, products and services in state of Kuwait. Based on that solid foundation, Diyar has emerged to provide innovative solutions in the Middle East Region. Our solutions have been carefully selected to add value by improving efficiency and effectiveness across all sectors. In addition we have invested in providing industry specific solutions for Government, e-Government, Homeland Security, Oil Industry, Telecommunication Industry, Transportation and Health Sector. We are committed to continually pursue technical innovation, expand our international technology alliances, invest in our intellectual property and our ability to integrate technologies in order to contribute to the advancement of the ICT adoption and implementation by our society, citizens, business, governments and countries. IT Services and IT Consulting Specialties: Partners in Technology

About the Role

We are looking for an experienced Cybersecurity Risk Specialist / Consultant to support cybersecurity risk management within a banking environment. The role will be responsible for identifying, assessing, monitoring, and reporting cybersecurity risks while ensuring alignment with SAMA Cybersecurity Framework, NCA ECC, ISO 27001, and the bank's internal policies and risk requirements.

Responsibilities

  • ● Conduct cybersecurity and information security risk assessments across IT, applications, infrastructure, cloud, and business services.
  • ● Identify cybersecurity risks, vulnerabilities, control gaps, and potential business impacts, and recommend appropriate remediation actions.
  • ● Maintain and continuously update the Cybersecurity Risk Register, including risk ratings, owners, treatment plans, and remediation status.
  • ● Perform security control assessments against SAMA CSF, NCA ECC, ISO 27001, and internal security policies.
  • ● Support third-party/vendor cybersecurity risk assessments, including security due diligence and review of supplier controls.
  • ● Assess cybersecurity risks related to cloud services, new technologies, applications, projects, and major IT changes.
  • ● Work with Cybersecurity, IT, Risk, Compliance, Internal Audit, and business teams to address identified risks and control deficiencies.
  • ● Track remediation activities and provide regular risk dashboards and management reports to senior management and relevant committees.
  • ● Support regulatory and internal cybersecurity audits and assessments, including evidence collection and remediation tracking.
  • ● Review and assess security policies, standards, procedures, and control frameworks to ensure continued compliance.
  • ● Support cybersecurity risk acceptance, exception management, and compensating control processes.
  • ● Participate in security governance activities, risk committees, and cybersecurity awareness initiatives.
  • ● Provide cybersecurity risk advice to project teams and business stakeholders during solution design and implementation.
  • ● 5+ years of experience in cybersecurity, information security, IT risk, GRC, or cybersecurity consulting.
  • ● Experience working within a banking or financial services environment is strongly preferred.
  • ● Strong practical knowledge of:
  • ● SAMA Cybersecurity Framework (CSF)
  • ● NCA Essential Cybersecurity Controls (ECC)
  • ● ISO 27001 / Information Security Management
  • ● Cybersecurity risk management and control frameworks
  • ● Third-party/vendor risk management
  • ● IT and cybersecurity audits
  • ● Experience performing cybersecurity risk and control assessments.
  • ● Good understanding of infrastructure, networks, cloud, applications, IAM, SOC, vulnerability management, and security operations.
  • ● Strong knowledge of risk assessment methodologies, risk treatment, risk acceptance, and control effectiveness.
  • ● Ability to translate technical cybersecurity risks into business and financial impact for management.
  • ● Strong documentation, analytical, presentation, and stakeholder-management skills.
  • ● CISSP
  • ● CISA
  • ● CRISC
  • ● ISO 27001 Lead Implementer / Lead Auditor
  • ● CCSP
  • ● Relevant SAMA/NCA cybersecurity or risk certifications

Requirements

  • ● Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Risk Management, or a related discipline.