Cybersecurity Governance Specialist

The Cybersecurity Governance Specialist at Brains Valley Company will be responsible for developing, implementing, and maintaining cybersecurity policies, standards, and procedures across the organization. This full-time, on-site role in Riyadh, Saudi Arabia includes coordinating risk assessments, overseeing compliance with internal and external security requirements, and supporting audit activities. The specialist will collaborate with IT, business units, and leadership to align security controls with organizational objectives, monitor adherence to governance frameworks, and recommend improvements based on emerging threats and best practices.

Daily activities include reviewing security documentation, tracking remediation plans, preparing reports and dashboards, and providing guidance and training to stakeholders on governance and security requirements.

• Strong foundation in Cybersecurity and Information Security, with the ability to apply governance frameworks, policies, and standards across the organization.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Engineering, or a related field.
• Minimum 2 years of experience in cybersecurity and cybersecurity management.
• Hands-on experience with Network Security and Application Security controls, including their implementation, monitoring, and continuous improvement.
• Ability to assess and manage cyber risk, including identifying threats, evaluating vulnerabilities, and supporting mitigation and incident response activities.
• Experience with compliance and regulatory requirements related to information security (e.g., ISO 27001, NCA regulations, data protection frameworks) is highly beneficial.
• Proficiency in documenting policies, procedures, and reports, and in communicating complex security concepts in clear, accessible language to diverse stakeholders.
• Strong analytical and problem-solving skills, attention to detail, and the ability to manage multiple priorities in a fast-paced environment.
• Bachelor’s degree in Information Security, Computer Science, or a related field; relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or equivalent are an advantage.
• Ability to work collaboratively on-site in Riyadh, Saudi Arabia, with cross-functional teams and maintain a high level of integrity and professional ethics.

• Develop, review, and maintain cybersecurity governance policies and procedures.
• Assess compliance with NCA ECC and relevant cybersecurity frameworks.
• Conduct cybersecurity governance and security control reviews.
• Review technical projects to identify cybersecurity risks and compliance gaps.
• Support implementation of NIST RMF requirements.
• Prepare governance reports, compliance assessments, and executive presentations.
• Coordinate with internal stakeholders to improve cybersecurity governance practices.