business analyst

business analyst - banking domain Jobs in Riyadh

business analyst - banking domain

financial credit analyst- ksa Jobs in Riyadh

financial credit analyst- ksa

it support engineer

it support specialist

cyber security analyst

Innovative Solutions SA

<div>
 <strong>
  Company Description
  <br/>
  <br/>
 </strong>
 Innovative Solutions (IS) is a leading pure-player Cyber security company in the GCC established in 2003, headquartered in Riyadh with presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our Cybersecurity Solutions and Services encompass Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.
 <br/>
 <br/>
 Innovative Solutions is committed to its mission to "Bring Trust to Cyberspace" to ensure "
 <strong>
  Your Business, Secured
 </strong>
 ."
 <br/>
 <br/>
 <strong>
  Role Description
  <br/>
  <br/>
 </strong>
 As a PAM Consultant specializing in CyberArk at Innovative Solutions, you will be responsible for implementing and managing privileged access management solutions using the CyberArk platform. You will collaborate with clients to understand their security needs and architect solutions that secure and manage privileged accounts, credentials, and sessions within their environment.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Deploy and configure CyberArk PAS, EPM
  </li>
  <li>
   Define and enforce PAM policies
  </li>
  <li>
   Integrate CyberArk with apps, servers, cloud
  </li>
  <li>
   Conduct access reviews &amp; compliance reporting
  </li>
  <li>
   Advise on PAM best practices &amp; regulatory alignment
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in Information Technology, Cybersecurity, or a related field
  </li>
  <li>
   4 to 7 years of experience in IAM/PAM, specifically with 2-3 years in CyberArk solutions
  </li>
  <li>
   Strong PAM lifecycle and Zero Trust knowledge
  </li>
  <li>
   Certification in CyberArk Defender/Guardian, CISSP/CISM is highly desirable
  </li>
 </ul>
</div>


PAM Consultant (CyberArk)

Innovative Solutions

<div><h3 class="jobSectionHeader"><b>Company Description</b></h3><p>
Innovative Solutions (IS) is a leading pure-player Cyber security company in the GCC established in 2003, headquartered in Riyadh with presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our Cybersecurity Solutions and Services encompass Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.</p><p>
Innovative Solutions is committed to its mission to &ldquo;Bring Trust to Cyberspace&rdquo; to ensure &ldquo;<b>Your Business, Secured</b>.&rdquo;</p><h3 class="jobSectionHeader"><b>
Role Description</b></h3><p>
As a PAM Consultant specializing in CyberArk at Innovative Solutions, you will be responsible for implementing and managing privileged access management solutions using the CyberArk platform. You will collaborate with clients to understand their security needs and architect solutions that secure and manage privileged accounts, credentials, and sessions within their environment.</p><h3 class="jobSectionHeader"><b>
Responsibilities</b></h3><ul>
<li>Deploy and configure CyberArk PAS, EPM</li>
<li>Define and enforce PAM policies</li>
<li>Integrate CyberArk with apps, servers, cloud</li>
<li>Conduct access reviews &amp; compliance reporting</li>
<li>Advise on PAM best practices &amp; regulatory alignment</li>
</ul><p><b>Requirements</b></p><ul>
<li>Bachelor's degree in Information Technology, Cybersecurity, or a related field</li>
<li>4 to 7 years of experience in IAM/PAM, specifically with 2-3 years in CyberArk solutions</li>
<li>Strong PAM lifecycle and Zero Trust knowledge</li>
<li>Certification in CyberArk Defender/Guardian, CISSP/CISM is highly desirable</li></ul></div>

MBC GROUP

<div>
 <p>
  <strong>
   About us
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  With three decades of creating iconic brands and producing groundbreaking award-winning content, MBC GROUP is the leading media organization in the MENA region and the number one Arabic media company in the world. MBC GROUP employs 3000+ staff from over 70 nationalities with a global audience of over 150 million viewers. It reaches audiences through multi-platform experiences &ndash; premium broadcasting, digital streaming, gaming, radio, apps, events, and more.
 </p>
 <p>
  <br/>
 </p>
 <p>
  We are seeking a dedicated and detail-oriented Security GRC (Governance, Risk, and Compliance) Analyst to join our dynamic team. In this crucial role, you will help establish a new Cyber GRC function, ensuring our organization not only meets regulatory requirements but also effectively manages risks and implements robust governance frameworks. Your deep understanding of risk management, compliance processes, and governance principles will be vital in shaping the future success of our technology services and customer products.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Key Responsibilities:
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Security Risk Management:
  </strong>
 </p>
 <ul>
  <li>
   Adhering to regional policy and industry standards facilitate the end-to-end security risk management process, ensuring that risks are proactively identified, assessed, recorded, and mitigated.
  </li>
  <li>
   Maintain a risk register and evaluate security risks based on their potential enterprise-wide &amp; product impact, likelihood, and mitigation strategies.
  </li>
  <li>
   Serve as a trusted security advisor, collaborating with cross-functional teams including IT, Internal Audit, Development/Engineering, and other business operations teams to foster a culture of risk awareness.
  </li>
  <li>
   Ensure that all security risks align with regulatory requirements such as ISO 27001, NIST, GDPR, and other international security frameworks.
  </li>
  <li>
   Provide oversight and work closely with risk owners to manage the development and implementation of treatment plans that address identified risks
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   GRC Tool Management:
  </strong>
 </p>
 <ul>
  <li>
   Take ownership of, manage, and continuously enhance the GRC platform to deliver structured and scalable GRC reporting.
  </li>
  <li>
   Develop new features with a GRC product mindset, focusing on integrations and custom reporting in the management tool.
  </li>
  <li>
   Capable of planning and prioritizing tasks to develop a timely and coordinated delivery plan for projects.
  </li>
  <li>
   Setup and manage automated workflows that integrate compliance checks on security controls across cloud and on-premise environments
  </li>
  <li>
   Experienced in writing compliance as code with third-party tools
  </li>
  <li>
   Ability to utilize AI services for analyzing, organizing, automating, and managing compliance frameworks and complex regulatory requirements.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Audit &amp; Compliance Requirements:
  </strong>
 </p>
 <ul>
  <li>
   Carry out a continuous assessment to ensure compliance with the necessary certifications and standards for the organization.
  </li>
  <li>
   Collaborate closely with the Cyber teams to ensure compliance with audit requirements and successful delivery for ISO 27001.
  </li>
  <li>
   Assist in addressing internal and external audit findings from reporting through to remediation and closure.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Governance:
  </strong>
 </p>
 <ul>
  <li>
   Assist in documenting, managing and maintaining a central repository of cyber &amp; data policies to guide and inform teams within the organization.
  </li>
  <li>
   Help prepare management meeting reports by tracking updates on risk triage activities, changes to the critical risk register, and general strategies for risk mitigation.
  </li>
  <li>
   Assist in preparing management meeting reports by providing comprehensive tracking and updates on certification compliance milestones.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Security Team &amp; Data Governance Collaboration:
  </strong>
 </p>
 <ul>
  <li>
   Establish a close collaborative working relationship with the Cyber Defense team.
  </li>
  <li>
   Utilize the cyber defense team's technical expertise to reduce risk and enhance compliance with security best practice.
  </li>
  <li>
   Establish a close collaborative working relationship with the Data Governance team.
  </li>
  <li>
   Utilize the Data Governance team's technical expertise to reduce risk and enhance compliance with data regulations.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Technical Expertise
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Cloud Platforms:
  </strong>
 </p>
 <ul>
  <li>
   Experience with AWS, GCP, and Azure, including cloud security, architecture, and management.
  </li>
 </ul>
 <p>
  <strong>
   Security Tools:
  </strong>
 </p>
 <ul>
  <li>
   Awareness of security tools and technologies such as SIEM (e.g., Splunk, ELK Stack), vulnerability management (e.g., Wiz, Tenable, Rapid7), WAF, DDoS protection (e.g., AWS Shield, Cloudflare), and endpoint security.
  </li>
 </ul>
 <p>
  <strong>
   GRC Management:
  </strong>
 </p>
 <ul>
  <li>
   Proficient in using centralized GRC management tooling.
  </li>
 </ul>
 <p>
  <strong>
   Analytics and Reporting:
  </strong>
 </p>
 <ul>
  <li>
   Experience in analyzing technical debt and historical incidents and generating risk insights.
  </li>
  <li>
   Ability to identify system performance patterns using observability tools.
  </li>
 </ul>
 <p>
  <strong>
   Compliance and Governance:
  </strong>
 </p>
 <ul>
  <li>
   Familiarity with compliance standards and frameworks such as ISO 27001, NIST, GDPR, and CCPA.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Qualifications
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Education
  </strong>
  :
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field.
  </li>
 </ul>
 <p>
  <strong>
   Experience
  </strong>
  :
 </p>
 <ul>
  <li>
   Minimum of 3 years of experience in GRC, risk management, compliance, or a related role.
  </li>
  <li>
   Experience in the digital entertainment or VOD industry is a plus.
  </li>
  <li>
   Experience with Saudi Government's National Cybersecurity Authority (NCA) is a plus.
  </li>
 </ul>
 <p>
  <strong>
   Skills:
  </strong>
 </p>
 <ul>
  <li>
   Strong understanding of regulatory requirements and industry standards.
  </li>
  <li>
   Excellent analytical and problem-solving skills.
  </li>
  <li>
   Effective communication and interpersonal skills.
  </li>
  <li>
   Ability to work independently and as part of a team.
  </li>
  <li>
   Professional certifications such as CRISC, CISA, or CISSP are a plus.
  </li>
  <li>
   Ability to work in a fast paced, dynamic environment.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  REF: PL
 </p>
</div>


Cyber GRC Analyst

Saudi Aramco

<p>A cybersecurity specialist develops, implements, and manages security measures to protect an organization's computer systems, networks, and data from cyber threats.</p><p>Job Type: Full-time</p><p>Pay: &#65020;15,000.00 - &#65020;30,000.00 per month</p>

Cybersecurity specialist

Giza Systems EG

<div><h4 class="jobSectionHeader"><b>Job Description</b></h4>
<p></p><div><div>We are seeking a highly experienced and motivated
<div><b>Cyber Security Expert</b></div>
with over 10 years of hands-on expertise in offensive and defensive security domains.
</div><div>The ideal candidate will be responsible for executing
<div><b>Vulnerability Assessments (VA), Penetration Testing (PT), and Red Teaming</b></div>
exercises.
</div><p>In addition to core technical responsibilities, the role involves managing regulatory threat tickets/cases, coordinating with internal teams for timely resolution, and maintaining communication with external cybersecurity regulatory authorities.</p></div><p></p>
<h4 class="jobSectionHeader"><b>Personal Skills</b></h4>
<p></p><div><ul><li>Conduct and lead VA/PT activities and Red Teaming engagements across infrastructure, applications, and cloud environments.</li>
<li>Manage and track threat cases/tickets received from regulatory authorities, ensuring timely resolution and compliance.</li>
<li>Collaborate with internal stakeholders to implement remediations, track action plans, and prepare closure reports.</li>
<li>Serve as the primary technical point of contact for external communications with authorities and regulators.<br>
Perform Go-Live Security Assessments for new services, applications, and infrastructure.</li>
<li>Lead and support Attack Surface Management initiatives to continuously identify and reduce exposures.</li>
<li>Provide technical guidance and support to SOC and DFIR teams during incidents, investigations, and threat analysis.</li>
<li>Document technical findings, prepare reports, and present risk and remediation strategies to both technical and non-technical audiences.</li>
<li>Stay updated with the latest security trends, threat intelligence, and regulatory compliance requirements.</li>
</ul></div><p></p>
<h4 class="jobSectionHeader"><b>Technical Skills</b></h4>
<p></p><div><ul><li>Strong knowledge of common vulnerabilities (OWASP, CVEs, etc.), exploitation techniques, and adversarial tactics (MITRE ATT&amp;CK).
</li><li>Solid understanding of risk assessment methodologies, security governance, and compliance frameworks.
</li><li>Familiarity with tools such as Burp Suite, Nmap, Metasploit, Nessus, Qualys, Splunk, EDR/XDR platforms, etc.
</li></ul>
&bull;Hands-on experience with SOC operations and Digital Forensics &amp; Incident Response (DFIR) is a plus&bull;Preferred certifications: OSCP / OSWE / OSEP / CRT
<br>
<ul><li>Other Red Team, Blue Team, or regulatory compliance-related certifications.</li></ul></div><p></p>
<h4 class="jobSectionHeader"><b>Education</b></h4>
<div><p>Bachelor's degree in Computer Science, Software Engineering, or a related field.</p></div></div><p></p>
<br><div><h4 class="jobSectionHeader"><b>Job Details</b></h4>
<div><div>Job Location</div>
<div>Riyadh, Saudi Arabia</div>
</div><div><div>Company Industry</div>
<div>IT Services</div>
</div><div><div>Company Type</div>
<div>Employer (Private Sector)</div>
</div><div><div>Job Role</div>
<div>Engineering</div>
</div><div><div>Employment Status</div>
<div>Full time</div>
</div><div><div>Employment Type</div>
<div>Employee</div>
</div><div><div>Job Division</div>
<div>Jafeer</div></div></div>
<br><div><h4 class="jobSectionHeader"><b>Preferred Candidate</b></h4>
<div><div>Career Level</div>
<div>Mid Career</div>
</div><div><div>Years of Experience</div>
<div>Min: 5 Max: 10</div>
</div><div><div>Residence Location</div>
<div>Saudi Arabia</div>
</div><div><div>Nationality</div>
<div>Saudi Arabia</div>
</div><div><div>Degree</div>
<div>Bachelor's degree</div></div></div>

Cybersecurity Expert

Mindstream

<p>Job Advertisement &ndash; L1 SOC Analyst (Level 1)<br/>Location: Qatar<br/>Duration: 3 Years<br/>Salary: Based on merit<br/>Role Summary:<br/>The L1 SOC Analyst is the first line of defense in the Security Operations Center (SOC). This role is responsible for real-time monitoring, detection, and escalation of security incidents, ensuring timely responses to potential threats.<br/>Key Responsibilities:<br/>Monitor SIEM and other security monitoring tools for alerts and suspicious activity.<br/>Perform initial triage to assess severity and potential impact of incidents.<br/>Escalate high-priority incidents to L2 Analysts or SOC Manager.<br/>Document incidents, findings, and actions taken in tracking systems.<br/>Support in basic investigations of malware, phishing, and intrusion attempts.<br/>Follow SOC playbooks and standard operating procedures.<br/>Requirements:<br/>Basic knowledge of cybersecurity concepts, threats, and attack vectors.<br/>Familiarity with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel).<br/>Understanding of TCP/IP, networking fundamentals, and operating systems.<br/>Strong analytical and communication skills.<br/>Willingness to work in 24x7 shift rotations.<br/>Experience in SOC setup, administration, and management is an advantage.<br/>Hands-on with Windows (Event Viewer, PowerShell) &amp; Linux CLI (logs, services).<br/>Ability to analyze logs from firewalls, proxies, and endpoints.<br/>Effective communication and documentation skills.<br/>Certifications (at least two required):<br/>CEH, GIAC, CySA+, ECIH, Microsoft Sentinel SIEM, Splunk certification, or equivalent.</p><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>Do you have prior experience working in a Security Operations Center (SOC)?</li><li>How many years of professional experience do you have in cybersecurity or SOC monitoring roles?</li><li>Do you hold at least two relevant cybersecurity certifications (e.g., CEH, GIAC, CySA+, ECIH, Microsoft Sentinel SIEM, Splunk, etc.)? please mention.</li><li>Are you comfortable working in 24x7 shift rotations, including nights, weekends, and holidays?</li><li>How would you rate your knowledge of networking fundamentals (TCP/IP, DNS, HTTP, ports, subnets, firewall logic)?</li><li>What is your current and expected monthly salary (QAR)? Notice period?</li></ul>

L1 SOC Analyst (Level-1)

<p>Job Advertisement &ndash; L2 SOC Analyst (Level 2)<br/>Location: Qatar<br/>Duration: 3 Years<br/>Role Summary:<br/>The L2 SOC Analyst serves as the second line of defense, conducting in-depth investigation, analysis, and response to escalated security incidents. This role ensures proper containment, remediation, and detailed reporting of threats.<br/>Key Responsibilities:<br/>Investigate escalated incidents from L1 Analysts.<br/>Perform root cause analysis and recommend corrective actions.<br/>Conduct malware analysis, threat hunting, and log correlation.<br/>Fine-tune SIEM rules and detection use cases to minimize false positives.<br/>Coordinate with IT/security teams for incident containment and remediation.<br/>Mentor and support L1 Analysts with technical expertise.<br/>Prepare detailed incident reports and contribute to incident response planning.<br/>Requirements:<br/>2&ndash;4 years of SOC or cybersecurity operations experience.<br/>Strong knowledge of cybersecurity concepts, attack techniques, and mitigation strategies.<br/>Hands-on experience with SIEM, IDS/IPS, firewalls, and EDR tools.<br/>Skilled in log analysis (network, system, application) and threat intelligence usage.<br/>Familiarity with MITRE ATT&amp;CK, NIST, and ISO 27001 frameworks.<br/>Proficiency in scripting (Python/PowerShell) for automation and hunting.<br/>Excellent analytical, communication, and report writing skills.<br/>Advanced Skills Preferred:<br/>Threat hunting and digital forensics (memory, disk, or packet analysis).<br/>Malware reverse engineering and detection engineering.<br/>Experience with SOAR platforms, Wireshark, and YARA/Sigma rules.<br/>Applying threat feeds (VirusTotal, AlienVault OTX, MISP).<br/>Certifications (at least four required):<br/>CEH, OSCP, CySA+, GCIH, ECIH, CASP+, CISSP, Splunk/Microsoft Sentinel, GCFA, GREM, GCTI, or equivalent.</p><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>How many years of experience do you have working in a Security Operations Center (SOC) role?</li><li>Do you have hands-on experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk, QRadar)?</li></ul><ul><li>Which cybersecurity tools and technologies have you worked with? (Please specify)</li></ul><p>&#9744; Endpoint Detection &amp; Response (EDR)</p><p>&#9744; IDS/IPS</p><p>&#9744; Firewalls</p><p>&#9744; Vulnerability Management tools</p><p>&#9744; SOAR platforms</p><p>&#9744; Threat Intelligence feeds</p><ul><li>Are you proficient in log analysis (network, system, application) and correlating events for incident investigations?</li><li>Do you have experience in threat hunting, digital forensics, or malware analysis?</li><li>Do you hold at least four relevant security certifications (e.g., CEH, OSCP, CySA+, GCIH, ECIH, CASP+, CISSP, Splunk/Microsoft Sentinel, GCFA, GREM, GCTI, etc.)?</li><li>What is your current and expected monthly salary (QAR)? Notice Period?</li></ul>

L2 SOC Analyst (Level-2)

Explore 370+ Cyber security analyst in Riyadh this September. Find roles across top companies and apply now to boost your career.

370 cyber security analyst jobs IN Riyadh

PAM Consultant (CyberArk)

PAM Consultant (CyberArk)

Cyber GRC Analyst

Cybersecurity specialist

Cybersecurity Expert

L1 SOC Analyst (Level-1)

L2 SOC Analyst (Level-2)