Cyber Security Analyst

The Cybersecurity Analyst is responsible for protecting Al Khozama Investment Company's information assets, systems, networks, and digital infrastructure from cyber threats. The role involves monitoring security events, assessing vulnerabilities, implementing security controls, responding to incidents, ensuring compliance with cybersecurity regulations, and supporting the organization's overall cybersecurity strategy.

• Monitor the organization's networks, systems, and security tools to detect and respond to cybersecurity threats and suspicious activities.
• Perform continuous security monitoring and analysis using Security Information and Event Management (SIEM) and other cybersecurity solutions.
• Investigate security incidents, perform root cause analysis, and recommend corrective and preventive actions.
• Conduct vulnerability assessments and coordinate penetration testing activities.
• Monitor remediation efforts and ensure identified vulnerabilities are resolved within agreed timelines.
• Implement and maintain endpoint protection, firewalls, email security, web security, and other cybersecurity controls.
• Review system configurations and security settings to ensure compliance with cybersecurity best practices.
• Assist in developing, maintaining, and enforcing cybersecurity policies, standards, and procedures.
• Support identity and access management (IAM) activities, including user access reviews and privileged access controls.
• Ensure compliance with applicable cybersecurity regulations, standards, and internal policies.
• Participate in cybersecurity risk assessments and recommend mitigation plans.
• Prepare cybersecurity reports, dashboards, and risk assessments for management.
• Support disaster recovery and business continuity planning from a cybersecurity perspective.
• Conduct cybersecurity awareness and phishing simulation activities for employees.
• Collaborate with internal departments and external vendors to strengthen the organization's cybersecurity posture.
• Stay informed about emerging cyber threats, vulnerabilities, and industry best practices.
• Participate in IT and cybersecurity projects to ensure security requirements are incorporated throughout the project lifecycle.
• Perform any other duties related to cybersecurity as assigned.
• Number of security incidents detected and resolved within SLA.
• Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• Percentage of vulnerabilities remediated within target timelines.
• Compliance with cybersecurity policies and regulatory requirements.
• Reduction in successful phishing attempts and security-related risks.
• Timely completion of security awareness initiatives.
• System security availability and effectiveness.
• Completion of periodic security assessments and audits.
• Accuracy and timeliness of cybersecurity reporting.

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.

• CompTIA Security+
• Certified Ethical Hacker (CEH)
• Certified Information Systems Security Professional (CISSP)
• GIAC Certifications
• Microsoft Security Certifications
• ISO/IEC 27001 Lead Implementer or Lead Auditor (preferred)

• Minimum of 3–5 years of experience in cybersecurity, information security, or IT security.

• Experience in Security Operations Center (SOC), incident response, vulnerability management, or security monitoring is preferred.
• Experience with in hospitality, real estate, or investment organizations is an advantage.