Cyber Security Specialist

Job Overview

ESOM Holding is seeking a highly skilled and motivated Cyber Security Specialist to join our Group Information Technology team in Riyadh, Saudi Arabia. This critical role is exclusively open to Saudi nationals and requires a minimum of five years of specialized experience in cybersecurity, infrastructure security, and governance. The successful candidate will play a pivotal role in safeguarding the organization’s digital assets, technology infrastructure, applications, and information systems while ensuring strict adherence to Saudi cybersecurity frameworks, including NCA ECC, CSCC, and SAMA CSF. Reporting directly to the Head of Information Security or the Group Director of IT, this position offers a dynamic and challenging environment where strategic security initiatives and hands-on technical expertise converge.

Key Responsibilities

The Cyber Security Specialist will be responsible for a wide range of security functions designed to protect ESOM Holding’s digital ecosystem. Core duties include conducting comprehensive vulnerability assessments and penetration testing across networks, infrastructure, wireless systems, applications, and cloud environments. The role requires proficiency in performing static and dynamic application security testing (SAST and DAST) and delivering actionable remediation recommendations to mitigate identified risks. Additionally, the specialist will be tasked with developing, maintaining, and enforcing robust information security policies, procedures, risk registers, standards, and compliance documentation to ensure alignment with Saudi cybersecurity regulations.

In collaboration with internal and external stakeholders, the specialist will support adherence to NCA ECC and CSCC frameworks, coordinate cybersecurity audits, and review system and network architectures to identify and address potential vulnerabilities. The position also involves monitoring emerging threats, assessing third-party security risks, and implementing secure-by-design practices to fortify the organization’s defenses. Furthermore, the specialist will manage security incidents, conduct root-cause investigations, oversee service continuity controls, maintain security records, track KPIs, and ensure accurate CMDB updates within an ITIL-aligned environment.

Required Qualifications

• Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a closely related field.
• Experience: Minimum of five years of dedicated experience in infrastructure security, application security testing, penetration testing, or cyber governance.
• Technical Proficiency: Hands-on experience with essential security tools such as Nessus, Burp Suite, Metasploit, Wireshark, and Acunetix.
• Knowledge Base: Strong understanding of network protocols, firewalls, identity and access management, encryption standards, and secure coding practices.
• Compliance Expertise: In-depth knowledge of Saudi cybersecurity compliance frameworks, particularly NCA ECC and CSCC.
• ITIL Alignment: Working knowledge of ITIL service management, including incident management, problem management, and service continuity.
• Language Skills: Professional proficiency in both Arabic and English.

Preferred Qualifications

While not mandatory, candidates with the following qualifications will be given preference:

• Professional cybersecurity certifications such as CEH, OSCP, CISSP, CISM, or CompTIA Security+.
• ITIL Foundation certification.
• Experience with SAMA CSF, cloud security, third-party risk assessments, or enterprise cybersecurity audits.

Why Join ESOM Holding?

As a leading organization in Saudi Arabia, ESOM Holding is committed to fostering a culture of innovation, excellence, and security. This role offers a unique opportunity to contribute to the protection of critical digital infrastructure while advancing your career in a dynamic and supportive environment. The Cyber Security Specialist will work alongside industry experts, gain exposure to cutting-edge security technologies, and play a key role in shaping the organization’s cybersecurity strategy. If you are a Saudi national with a passion for cybersecurity and a proven track record in safeguarding digital assets, we encourage you to apply and become an integral part of our mission to ensure a secure and resilient digital future.