associate director - contracts administration Jobs in Riyadh Saudi Arabia

associate director - contracts administration

assistant director of sales and marketing Jobs in Riyadh Saudi Arabia

assistant director of sales and marketing

associate director - commercial management Jobs in Riyadh Saudi Arabia

associate director - commercial management

associate director - development communications (construction delivery) Jobs in Riyadh Saudi Arabia

associate director - development communications (construction delivery)

associate media director Jobs in Riyadh Saudi Arabia

associate media director

associate director cybersecurity

Protiviti Middle East Member Firm

<div>
 
 
 Senior Manager/Associate Director -Cyber Security
 
 
 
 
 
 
 We have an interesting and a challenging opportunity opened up for the role of Senior Manager
 
 /Associate Director
 
 in our cyber Security / IT consulting practice.
 
 
 The Senior Manager role in Cyber Security / IT consulting has strategic dimensions that require interfacing with key stakeholders within Protiviti and client organizations. This role demands strategic thinking to design and develop &lsquo;best-of-breed&rsquo; approach for transition and transformation of IT services. Senior Managers provide clients integrated transition and transformation solution encompassing business applications, infrastructure and operations transformation.
 
 
 Senior Managers work with multiple practices to understand their solution with respect to technology, people, processes and tools. They will integrate the information to formulate a robust &lsquo;fit for purpose&rsquo; transition and transformation solution that clearly articulates the dependencies, risks &amp; mitigation approach and staffing required for executing the solution. The proposed transformation solution should clearly highlight value propositions and benefits to the client organization.
 
 
 Senior Managers will provide end-to-end pre-sales support to the pursuit team that includes developing solution documents, participating in various solution validation workshops with clients, solution presentations, active participation in due diligence activities and contracting workshops.
 
 
 
 
 
 
 Role Requirements-
 
 
 
 Some of the key responsibilities of this role are:
 
 <ul>
 <li>
 Develop a strong market connect in public and private sector and across industries like banking, financial services, insurance, telecom, media and entertainment, healthcare, retail, real estate and manufacturing.
 </li>
 <li>
 Lead and contribute in developing and executing sector specific go-to-market strategies.
 </li>
 <li>
 Engage clients at the CxO level to lead innovation pursuits and the development of an IT Security.
 </li>
 <li>
 Support clients (C-Level &amp; Business Heads) in establishing business case for IT Security and consulting engagements related to ITIL, ISO 27001, COBIT, or other such standards.
 </li>
 <li>
 Help better establish in the domains of Cloud Security and Operational Technology.
 </li>
 <li>
 Train and provide guidance to junior staff in their areas of work for all round development.
 </li>
 <li>
 Lead engagements and drive (internal, client and third party vendor mix) teams in program execution.
 </li>
 <li>
 Work with internal stakeholders &ndash; in articulating customer situations, extracting the best solution proposition for the customer and in ensuring customer delight.
 </li>
 <li>
 Support new and start-up engagements working with the wider team within the client organization.
 </li>
 <li>
 Provide hands on strategic direction setting, architecture design and support the build out/hire of new teams in key accounts.
 </li>
 <li>
 Represent Protiviti at key regional industry forums.
 </li>
 </ul>
 
 
 
 
 
 Desired Profile
 
 
 <ul>
 <li>
 Preferred candidates will be Information Security specialists with broad business perspective and insights. Must be knowledgeable of latest business trends and developments.
 </li>
 <li>
 Minimum 13 years of IT consulting/Information experience. Interested candidates should have core experience in one of the following areas:
 </li>
 <li>
 Information Security Governance and Operations
 </li>
 <li>
 Identity Access Management and Privileged Access Management
 </li>
 <li>
 Cloud Security
 </li>
 <li>
 operational technology and control systems
 </li>
 <li>
 Data Security, Data Privacy and GDPR
 </li>
 <li>
 IT investigations, digital forensics, eDiscovery
 </li>
 <li>
 Vulnerability Assessment and Penetration Testing
 </li>
 </ul>
 
 
 
 <ul>
 <li>
 Exposure to ISO 27001 / Cobit / NIST / CIS / OWASP/CISSP standards and frameworks
 </li>
 <li>
 Bachelors in Engineering /Masters in Computer applications with an MBA.
 </li>
 <li>
 Candidate should be confident in dealing with C-level executives and promoters. Candidate should be very familiar to Middle East business ecosystem.
 </li>
 <li>
 Possess strong Industry domain knowledge in one or two vertical industries &ndash; e.g. telecom, banking &amp; insurance, engineering and construction, utilities, and healthcare.
 </li>
 <li>
 Professional certifications in information security management such as CISSP, CISA, GIAC, GICSP or others. Program delivery leadership and experience.
 </li>
 <li>
 Ideally a mix of experience in clients and experience in vendor / service companies / leading consulting firms in Middle East region.
 </li>
 <li>
 It will be useful to have established industry presence - including publications and conference engagements.
 </li>
 </ul>
 
 
 
 
 
 Key Personal Attributes
 
 
 <ul>
 <li>
 Exceptional interpersonal skills and history of developing strong client relationships.
 </li>
 <li>
 High energy individual possessing excellent analytical, interpersonal, communication and presentation skills.
 </li>
 <li>
 Adept at preparing, presenting and training senior audiences especially in the domains of Information / Cyber Security.
 </li>
 <li>
 Demonstrates excellent leadership and interpersonal skills. Must be able to maintain a professional demeanor in times of high stress.
 </li>
 <li>
 Prior management and direct supervisory experience in a team environment required.
 </li>
 <li>
 Excellent time management skills. Must have ability to multi-task.
 </li>
 <li>
 Regular reading habits to stay abreast of new trends &amp; developments and exhibit high level of confidentiality.
 </li>
 <li>
 Enjoys travelling and meeting new people. Flexibility to travel to, and work in, other locations is essential.
 </li>
 </ul>
 
 
 About Us
 
 
 <ul>
 <li>
 Protiviti delivers deep expertise, objective insights, a tailored approach and unparalleled collaboration to help leaders face the future with confidence. Our consulting solutions span critical business problems in technology, business process, analytics, risk, compliance, transactions and internal audit. We are committed to attracting and developing a diverse workforce of professionals that share the common value of collaboration. As an organization, we believe that by teaming together, with each other, and our clients, we can see beyond the surface of changes and problems organizations face in this fast changing world to discover opportunities others might miss and face the future with greater confidence.
 </li>
 </ul>
 
 
 
 <ul>
 <li>
 Our more than 4,500 people serve clients through the network of Protiviti and independently owned Member Firms in more than 70 offices in over 20 countries. We have served over 60% of FORTUNE 1000&reg; companies and 35% of FORTUNE Global 500&reg; companies. Our people and organization have consistently been recognized by FORTUNE and Consulting Magazine as a best company to work for. In the Middle East Region, Protiviti&rsquo;s member firm is a leading provider of business consulting, internal audit, risk management, technology, forensic and fraud investigation, human capital and transaction services. Protiviti member firms are separate and independent legal entities, are not agents of other firms in the Protiviti network, and have no authority to obligate or bind other firms in the Protiviti network.
 </li>
 </ul>
</div>

Associate Director-Cybersecurity

<div>Line of Service
Internal Firm Services
Industry/Sector
Not Applicable
Specialism
IFS - Internal Firm Services - Other
Management Level
Associate
Job Description &amp; Summary
At PwC, our people in managed services focus on a variety of outsourced solutions and support clients across numerous functions. These individuals help organisations streamline their operations, reduce costs, and improve efficiency by managing key processes and functions on their behalf. They are skilled in project management, technology, and process optimization to deliver high-quality services to clients.
 
 
Those in managed service management and strategy at PwC will focus on transitioning and running services, along with managing delivery teams, programmes, commercials, performance and delivery risk. Your work will involve the process of continuous improvement and optimising of the managed services process, tools and services.
Why PwC
Established in the region for over 40 years, PwC Middle East employs over 6,000 people across 12 countries: Bahrain, Egypt, Iraq, Jordan, Kuwait, Lebanon, Libya, Oman, Qatar, Saudi Arabia, Palestine and the United Arab Emirates. Complementing our depth of industry expertise and breadth of skills is our sound knowledge of local business environments across the Middle East region. Our tailored solutions help our clients meet the challenges and opportunities of doing business in the Middle East market, and beyond. 
 
Job Summary
A career in our Cyber technology services will allow you to work under the supervision of cyber cybersecurity leadership within the Cyber business unit consulting practice. Use strategic business consulting skills to work with clients through all stages of strategy-based transformation projects. Provide support on client assignments that help to develop a strategy and then refocus an organization on making that strategy a reality. We are a growing team and looking for dynamic, flexible, proactive and hardworking consultants who have a passion for shaping cybersecurity positively in the GCC over the coming years. We have a strong pipeline of large, transformational opportunities with our clients which will provide great opportunities for all our people to step up and play significant and rewarding roles in an entrepreneurial and innovation driven environment.
Roles &amp; Responsibilities
As a Senior Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:
Work under the supervision of cybersecurity leadership within the Cyber &amp; Digital Trust business unit consulting practice.
Support in the design and development of cybersecurity programs in different domains including the development of strategy, GRC, architecture, identity and access management and cybersecurity solutions based on leading practices such as NIST, CIS, ISO27001 and others.
Support the development and implementation of cybersecurity governance, risk and compliance frameworks aligned with NIST CSF, ISO 27001, CIS Controls, and local GCC regulatory requirements (e.g., NCA, SAMA, NESA, TDRA, NDMO).
Conduct cybersecurity risk assessments, maturity assessments, and gap analyses to benchmark client capabilities against industry standards and regulatory expectations.
Develop and refine cybersecurity policies, procedures, standards, and guidelines ensuring alignment with business objectives, compliance mandates and leading practices.
Support audit readiness and certification efforts for frameworks such as ISO 27001 and other related standards.
Design of cybersecurity strategies and roadmaps that balance risk management, business enablement, and digital transformation goals.
Work closely with cross-functional teams to define target operating models for cybersecurity functions, including governance structures, roles, and performance indicators.
Develop and execute cybersecurity awareness and culture programs. This includes designing tailored awareness campaigns, executive briefings, training programs, and behavior-change initiatives to foster a culture of digital trust and resilience.
Assist in the design of target technical security architecture for clients with deep understanding and analysis of emerging cybersecurity solutions including, but not limited to, threat intelligence, anti-advanced persistent threats, DLP, SIEM, next generation firewalls, analytics, enterprise incident response and others.
Support in the implementation of cybersecurity solutions at client premises and be able to work closely with security vendors and system integrators.
Communicate effectively (both verbal and writing) with executives, IT personnel, executives, and business users communities, translating complex cybersecurity concepts into actionable insights.
Support in coordinating, facilitating, and making presentations.
Support in business development activities, including preparation of technical and financial proposals and participation in client pursuits.
Work with colleagues across PwC Middle East offices on client engagements and internal initiatives as well as with international teams.
Conduct research on emerging cybersecurity technologies and disseminate knowledge to Cyber &amp; Digital Trust consultants and clients where required.
Assist in developing new service offerings for the Cyber &amp; Digital Trust business unit.
Build deep understanding of regional cybersecurity themes and trends, particularly those impacting clients in government, financial services, energy, and critical infrastructure. Work collaboratively with other cybersecurity experts to shape the future of our clients and to bring about positive change.
You will have access to all of the latest training and development tools and the support of the wider PwC network.
Additional Roles &amp; Responsibilities
Skills and Competencies
Strong understanding of emerging cybersecurity technologies and standards.
Experience in cybersecurity strategy development, operating model design, culture transformation, as well as cybersecurity governance, risk and compliance management.
Experience interpreting and applying GCC regulatory frameworks (NCA, SAMA, NESA, PDPL, etc.) and international leading practices (ISO 27001, NIST CSF, etc.).
Special experience in identity and access management, SIEM/SOC, security architecture, cloud and DLP is a plus.
Achievement oriented with the ability to be flexible and adaptive on a daily basis.
Excellent organisational skills, having the ability to prioritise workload whilst being resilient and able to cope well under pressure and meet tight deadlines.
Excellent problem solving skills with a structured thinking process.
Strong connections and relationships with clients in Saudi Arabia and the UAE is a plus.
Strong time-management and organizational skills.
Ability to learn new concepts and carry out technical research.
Proven IT skills in Microsoft Office and G-suite applications.
Language Skills: Excellent communication skills (verbal and written) in English (Arabic is a plus).
The ability and willingness to travel within the Middle East is a MUST.
Educational Qualifications &amp; Certifications
Education: B.A/ B.Sc. in Computer Engineering or related field. M.Sc. in Computer Engineering or related field is preferred. 
 
Candidates are expected to hold or be actively pursuing one or more of the globally recognized certifications relevant to Cybersecurity, Digital Trust and Project Management.
Minimum years experience required
<ul><li>1-3 Years of experience
</li></ul>Additional application instructions
<ul><li>N/A
</li></ul>Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Automation, Automation Framework Design and Development, Automation Solutions, Budgetary Management, Business Process Automation (BPA), Business Process Improvement, Business Process Outsourcing, Business Transformation, Communication, Continuous Process Improvement, Data Quality Automation, Deliverable Planning, Delivery Excellence, Design Automation, Digital Transformation, Emotional Regulation, Empathy, Inclusion, Intellectual Curiosity, Managed Services, Operational Excellence, Operational Performance Management (OPM) {+ 19 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Available for Work Visa Sponsorship?
Government Clearance Required?
Job Posting End Date</div>

GRC & Cloud Security Analyst

Games Jobs Direct

Overview Do you have project management experience and are you seeking a new job in Riyadh? Our client is looking for a PMO Director, and the role comes with an attractive salary and benefits package.As a PMO Director, you will be accountable for the Operational Services layer that supports the studio by overseeing the management of transversal teams and Production services Co-development, Agile Practices and Production Methodologies and PMO. Responsibilities <ul><li>Contribute to the implementation of co-development mandates with collaborating studios, communicate the mandate to the teams, make any necessary adjustments and ensure compliance throughout the production process</li><li>Centralise information on current and future mandates</li><li>Assess needs for upcoming projects within the studios and provide visibility on future requirements and relevant service teams</li><li>Develop standards and guidelines to ensure a smooth technical collaboration between lead and associate studios.</li></ul>

PMO Director.

CCDS

<div>CCDS is seeking a talented Senior IT &amp; Cybersecurity Pre-Sales Engineer to join our dynamic team. In this influential role, you will act as a key technical advisor, working closely with our sales team and clients to understand their unique IT and cybersecurity needs. Your expertise will be essential in developing tailored solutions that meet their business goals. This position provides an excellent opportunity to blend your technical knowledge with sales strategy in an engaging environment dedicated to providing top-tier cybersecurity and IT solutions.
Key Responsibilities:<ul>
<li>
Work collaboratively with the sales team to assess customer requirements and design effective IT and cybersecurity solutions.</li>
<li>Conduct comprehensive assessments of client IT environments, identifying vulnerabilities and recommending appropriate cybersecurity enhancements.</li>
<li>Create and deliver engaging presentations and product demonstrations to illustrate the value of our IT and cybersecurity offerings.</li>
<li>Prepare detailed technical proposals and respond to RFPs clearly articulating the benefits of CCDS products.</li>
<li>Address technical inquiries from clients, providing expert advice on IT and cybersecurity strategies.</li>
<li>Partner with product development and engineering teams to ensure alignment with market and client needs.</li>
<li>Stay updated on the latest trends and regulations in the IT and cybersecurity sectors.</li>
<li>Identify technical requirements and architecture designs for enterprise-level clients.</li>
<li>Support the business development team with pertinent technical insights and solution recommendations.</li>
<li>Engage with technology vendors and partners to align solutions with industry standards.</li>
<li>Collaborate effectively with implementation teams to ensure the seamless transition and delivery of projects.</li>
<li>Contribute to the internal knowledge base and mentor junior engineers when necessary.</li>
</ul>
Requirements<ul>
<li>
Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.</li>
<li>Native Arabic speaker with strong English proficiency (both spoken and written).</li>
<li>5+ years of experience in a pre-sales engineering capacity focusing on IT and cybersecurity.</li>
<li>In-depth knowledge of IT infrastructure, operations, and security practices.</li>
<li>Demonstrated ability to build and maintain relationships with clients by addressing their technical needs.</li>
<li>Outstanding communication and presentation skills, capable of simplifying complex technical content for varied audiences.</li>
<li>Sharp analytical and problem-solving abilities, complemented by a consultative approach.</li>
<li>Relevant certifications such as CISSP, CISM, or other IT security-related credentials are advantageous.</li>
<li>Ability to operate independently as well as collaboratively within a team setting.</li>
<li>Flexibility to travel as necessary to meet client requirements and support sales initiatives.</li>
<li>Strong technical understanding across various cybersecurity domains, including:</li>
<li><ul><li>Network Security (Firewalls, VPNs, IDS/IPS)</li></ul></li>
<li><ul><li>Identity &amp; Access Management (IAM, PAM)</li></ul></li>
<li><ul><li>Endpoint Protection and EDR/XDR</li></ul></li>
<li><ul><li>Data Loss Prevention (DLP)</li></ul></li>
<li><ul><li>Cloud Security and Zero Trust Architecture</li></ul></li>
<li><ul><li>SIEM, SOAR, and Threat Intelligence solutions</li></ul></li>
</ul>
Experience with major cybersecurity vendors (e.g., Palo Alto, Fortinet, Cisco, CrowdStrike, Microsoft, etc.) is preferred.<ul>
<li>
Exceptional presentation, communication, and interpersonal competencies.</li>
<li>Proven track record of translating complex technical ideas to grassroots stakeholders.</li>
<li>Additional relevant certifications such as CISSP, CEH, CompTIA Security+, CISM, or vendor-specific certifications are a plus.</li>
</ul><h3 class="jobSectionHeader">
Why Join Us</h3><ul>
<li>Collaborate with leading experts in the cybersecurity field.</li>
<li>Take the lead on pre-sales initiatives for large, enterprise-level clients.</li>
<li>Gain exposure to cutting-edge technologies in the cybersecurity realm.</li>
<li>Benefit from a supportive and inclusive work environment that offers pathways for career advancement.</li>
</ul>
If you are an accomplished pre-sales engineer with a passion for IT and cybersecurity, we encourage you to apply. Please submit your resume along with a cover letter detailing your relevant experience and how you've contributed to past projects.
Benefits<ul>
<li>
Private Health Insurance</li>
<li>Paid Time Off</li>
<li>Performance Bonus</li></ul></div>

Senior IT & CyberSecurity Pre-Sales Engineer

ALSTOM

<div>Req ID:501483 

At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars. 


Your future role

&quot;Take on a new challenge and apply your cybersecurity architecture and engineering expertise in a new cutting-edge field. You&rsquo;ll work alongside collaborative and forward-thinking teammates. 
You'll play a pivotal role in ensuring the security and resilience of Alstom's solutions, protecting them against evolving cyberthreats. Day-to-day, you&rsquo;ll work closely with teams across the business (engineering, project management, and third-party vendors), conducting cybersecurity risk assessments, defining security requirements, and providing technical guidance to project teams, and much more.&quot;

We&rsquo;ll look to you for:
<ul>
<li>Understanding the solution to be delivered and secured. ,
</li>
<li>Designing and documenting reliable security architecture resilient against cyber threats (CADRA). ,
</li>
<li>Leading or contributing to cybersecurity risk assessments. ,
</li>
<li>Support and deploy cybersecurity knowledge and processes. ,
</li>
<li>Conducting cybersecurity evaluations of developed solutions. ,
</li>
<li>Managing third parties on cybersecurity aspects. ,
</li>
<li>Overseeing cybersecurity vulnerability management. ,
</li>
<li>Providing technical guidance and supervision for project/program teams. ,
</li>
<li>Supporting engineering teams to address design and technical challenges related to cybersecurity implementation. ,
</li>
<li>Acting as a key reference for management and third parties on cybersecurity architecture and technical implementation.</li> 
</ul>
 
All about you

We value passion and attitude over experience. That&rsquo;s why we don&rsquo;t expect you to have every single skill. Instead, we&rsquo;ve listed some that we think will help you succeed and grow in this role:
<ul>
<li>Degree in Computer Science, Cybersecurity, Information Technology, or a related field. ,
</li>
<li>Experience or understanding of cybersecurity risk assessment and management practices. ,
</li>
<li>Knowledge of cybersecurity architecture design and implementation. ,
</li>
<li>Familiarity with cybersecurity standards and frameworks (e.g., ISO 27001, NIST). ,
</li>
<li>Technical proficiency in the following field 
<ul><li>Architecture concepts and techniques of systems and networks, operating systems and associated programming languages.</li>
<li>Knowledge of the main techniques for evaluating systems security</li>
<li>Knowledge of tools of tools such as Wireshark, Nmap, OpenVAS, Nexpose, Metasploit, nessus, BURP</li>
</ul>
</li><li>Strong technical problem-solving skills with a focus on resilience and adaptability. ,
</li>
<li>Continuous learning mindset to stay updated on emerging cybersecurity threats and technologies.</li></ul> 

Things you&rsquo;ll enjoy

Join us on a life-long transformative journey &ndash; the rail industry is here to stay, so you can grow and develop new skills and experiences throughout your career. You&rsquo;ll also:
<ul>
<li>Collaborate with transverse teams and helpful colleagues ,
</li>
<li>Progress towards becoming a key contributor to Alstom&rsquo;s cybersecurity strategy and gaining recognition as a technical expert in the field ,
</li>
<li>Utilise our inclusive and collaborative working environment, designed to foster growth, resilience, and continuous learning&quot; ,
</li>
<li>Contribute to innovative projects,
</li>
<li>Benefit from a fair and dynamic reward package that recognises your performance and potential, plus comprehensive and competitive social coverage (life, medical, pension)</li></ul> 

You don&rsquo;t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you&rsquo;ll be proud. If you&rsquo;re up for the challenge, we&rsquo;d love to hear from you! 

Important to note
As a global business, we&rsquo;re an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We&rsquo;re committed to creating an inclusive workplace for everyone. 

Job Type:Experienced 
 
Job Segment: Computer Science, Project Manager, Technology</div>

Cybersecurity Engineer

<div>Line of Service
Internal Firm Services
Industry/Sector
Not Applicable
Specialism
IFS - Internal Firm Services - Other
Management Level
Senior Associate
Job Description &amp; Summary
At PwC, our people in managed services focus on a variety of outsourced solutions and support clients across numerous functions. These individuals help organisations streamline their operations, reduce costs, and improve efficiency by managing key processes and functions on their behalf. They are skilled in project management, technology, and process optimization to deliver high-quality services to clients.
 
 
Those in managed service management and strategy at PwC will focus on transitioning and running services, along with managing delivery teams, programmes, commercials, performance and delivery risk. Your work will involve the process of continuous improvement and optimising of the managed services process, tools and services.
<div><div>This role is ideal for candidates experience in cloud security who are passionate about safeguarding cloud-based environments and applications. The successful candidate will assist in implementing, managing, and optimizing cloud security solutions, focusing on tools such as Microsoft 365 Security , Google Security &amp; Identity platforms.
</div><div>Roles and Responsibilities:
</div><div>Daily tasks and delivery expectation
</div><div><ul><li>Monitor, analyze, and respond to security alerts across multi-cloud platforms (Azure, AWS, GCP) using tools such as Microsoft Defender, Sentinel, and Google Security Command Center.
</li></ul></div><div><ul><li>Support identity and access management (IAM) implementation, including Zero Trust and Identity Governance practices for regulated sectors.
</li></ul></div><div><ul><li>Collaborate with PwC&rsquo;s Managed Cyber Defense and SOC teams on incident response and threat remediation activities.
</li></ul></div><div><ul><li>Assist in developing and enforcing cloud security policies aligned with regional frameworks (NCA ECC/CCC, SAMA CSF, UAE ISR).
</li></ul></div><div><ul><li>Contribute to configuration and deployment of cloud-native security controls aligned with CIS, NIST, and ISO 27001 standards.
</li></ul></div><div><ul><li>Prepare technical and client-facing reports, dashboards, and recommendations to improve cloud security posture.
</li></ul></div><div><ul><li>Work closely with multidisciplinary teams to integrate security-by-design into client cloud transformation initiatives.
</li></ul></div><div>Expected Skills:
</div><div>Specific learned abilities or technical skills
</div><div><ul><li>Hands-on experience with cloud security tools, particularly:
</li></ul></div><div><ul><li>Microsoft 365 Security Suite, including Defender for Identity, Advanced Threat Protection, and Compliance tools.
</li></ul></div><div><ul><li>Google Security, including Google&rsquo;s Chronicle Detection Language (YARA-L and UDM Query Language) .
</li></ul></div></div><div><div><ul><li>Understanding of cloud environments and technologies such as Azure AD, Google Workspace, and Microsoft 365.
</li></ul></div><div><ul><li>Familiarity with security frameworks like ISO 2701 7 , NCA, CIS Benchmarks, and NIST.
</li></ul></div><div><ul><li>Basic knowledge of incident response processes and risk management in cloud environments.
</li></ul></div><div><ul><li>Awareness of Zero Trust, DevSecOps , and automation in cloud environments.
</li></ul></div><div><ul><li>F oundational understanding of network security and secure configurations.
</li></ul></div><div><ul><li>Strong analytical and problem-solving skills.
</li></ul></div><div><ul><li>Ability to work collaboratively in a team-oriented environment.
</li></ul></div><div><ul><li>Excellent communication skills, with the ability to convey technical findings to diverse audiences.
</li></ul></div><div><ul><li>Eagerness to learn and adapt to new cloud security technologies and frameworks. 
</li></ul></div><div>Expected Competencies:
</div><div>Values, behaviors &amp; attitude
</div><div><ul><li>Leadership
</li></ul></div><div><ul><li>Strategic mindset
</li></ul></div><div><ul><li>Stakeholder management
</li></ul></div><div><ul><li>Ability to influence
</li></ul></div><div><ul><li>Communicate with impact
</li></ul></div><div><ul><li>Project management
</li></ul></div><div><ul><li>Results driven
</li></ul></div><div><ul><li>Drive organizational excellence
</li></ul></div></div><div><div>Required Language Skills:
</div><div>Proficient in written and spoken English. Arabic is a plus
</div><div>Minimum Education and Specific Qualification:
</div><div><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or a related field.
</li></ul></div><div><ul><li>Relevant certifications such as Microsoft Security, Compliance, and Identity Fundamentals (SC-900) or Google Cloud Associate Engineer (preferred).
</li></ul></div><div><ul><li>Knowledge or awareness of NCA CCC/CCSP, SAMA CSF, or UAE ISR frameworks is advantageous .
</li></ul></div></div>Minimum years experience required
<ul><li>5-7 years of experience in cloud security or a related cybersecurity role.
</li></ul>Additional application instructions
<ul><li>N/A
</li></ul>Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Automation, Automation Framework Design and Development, Automation Solutions, Budgetary Management, Business Process Automation (BPA), Business Process Improvement, Business Process Outsourcing, Business Transformation, Communication, Continuous Process Improvement, Creativity, Data Quality Automation, Deliverable Planning, Delivery Excellence, Design Automation, Digital Transformation, Embracing Change, Emotional Regulation, Empathy, Inclusion, Intellectual Curiosity {+ 24 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Available for Work Visa Sponsorship?
Government Clearance Required?
Job Posting End Date</div>

Cloud Security SecOps Specialist

American Express Saudi Arabia

<div>
 
 
 Company Description
 
 
 
 American Express Saudi Arabia, established in 1999, is a leading financial company in the Kingdom, renowned for delivering excellence and innovative payment solutions. Our mission is to empower individuals and businesses to progress through advanced payment solutions like Credit Cards, Charge Cards, and other services tailored to fit diverse needs. We lead the Card Business Payment sector, helping customers manage expenses and cash flow effectively. Join us to be part of a team that provides world-class experiences and business success.
 
 
 
 
 
 
 About the Role:&nbsp;
 
 
 We are seeking a motivated and detail-oriented Cybersecurity GRC Specialist to join our growing cybersecurity team. The ideal candidate will play a key role in developing and delivering cybersecurity awareness and training programs, supporting internal audits, assisting with third-party risk management and contributing to risk management initiatives. This role offers the opportunity to work across various cybersecurity governance, risk and compliance areas while developing your career in the dynamic field of cybersecurity.
 
 
 
 
 
 
 
 
 
 
 Key Responsibilities include
 
 
 :
 
 
 <ul>
 <li>
 Assist in identifying, assessing, and reporting cybersecurity risks across the organization.
 </li>
 <li>
 Support the development and maintenance of risk registers, tracking identified risks, and assisting in risk mitigation strategies.
 </li>
 <li>
 Support the planning and execution of internal cybersecurity audits to assess adherence to cybersecurity and regulatory requirements.
 </li>
 <li>
 Assist in preparing audit documentation, audit reports, and follow-up on audit findings with relevant departments.
 </li>
 <li>
 Conduct periodic reviews of third-party cybersecurity posture and assist in monitoring vendor performance in relation to compliance and risk management requirements.
 </li>
 <li>
 Collaborate with the procurement and legal teams to ensure third-party cybersecurity requirements are adequately addressed in vendor contracts and service level agreements (SLAs).
 </li>
 <li>
 Design, develop and implement cybersecurity awareness and training programs in alignment with international standards and regulations (e.g., ISO 27001, NCA, SAMA, PCI DSS).
 </li>
 <li>
 Deliver periodic cybersecurity awareness sessions (online and/or in person). Monitor employee engagement and completion.
 </li>
 <li>
 Track and report on training &amp; phishing metrics to measure effectiveness and to identify risky areas for improvement.
 </li>
 <li>
 Plan and manage phishing simulations and analyze results.
 </li>
 <li>
 Governance of User Violations and Disciplinary Measures
 </li>
 <li>
 Maintain consistent communication about threats, trends, and best practices.
 </li>
 <li>
 Perform other duties as assigned by the GRC Manager.
 </li>
 </ul>
 
 
 
 
 
 Necessary Documents to Submit
 
 
 :
 
 
 <ul>
 <li>
 Resume/CV
 </li>
 <li>
 Bachelor's degree in computer science, information security or a related field.
 </li>
 <li>
 Relevant certifications (e.g., CompTIA Security+, ISO 27001 Foundations).
 </li>
 </ul>
 
 
 &nbsp;
 
 
 
 
 Why Join AMEX
 
 
 :
 
 
 <ul>
 <li>
 Working at American Express Saudi Arabia offers a unique opportunity to be part of a global brand with strong local presence. Employees benefit from competitive salaries, continuous training, and professional growth. The company fosters an inclusive and innovative work culture, led by strong leadership and a clear vision. With a focus on digital transformation and social responsibility, AMEX is a place where talent is valued and empowered.
 </li>
 </ul>
 
 
 
</div>

Cybersecurity GRC Analyst

Explore 344+ Associate director cybersecurity in Riyadh Saudi Arabia this November. Find roles across top companies and apply now to boost your career.