business analyst Jobs in Riyadh Saudi Arabia

business analyst

data analyst

fraud analyst Jobs in Riyadh Saudi Arabia

fraud analyst

assistant manager - application security Jobs in Riyadh Saudi Arabia

assistant manager - application security

associate director-cybersecurity Jobs in Riyadh Saudi Arabia

associate director-cybersecurity

cybersecurity analyst

American Express Saudi Arabia

<div>
 
 
 Company Description
 
 
 
 American Express Saudi Arabia, established in 1999, is a leading financial company in the Kingdom, renowned for delivering excellence and innovative payment solutions. Our mission is to empower individuals and businesses to progress through advanced payment solutions like Credit Cards, Charge Cards, and other services tailored to fit diverse needs. We lead the Card Business Payment sector, helping customers manage expenses and cash flow effectively. Join us to be part of a team that provides world-class experiences and business success.
 
 
 
 
 
 
 About the Role:&nbsp;
 
 
 We are seeking a motivated and detail-oriented Cybersecurity GRC Specialist to join our growing cybersecurity team. The ideal candidate will play a key role in developing and delivering cybersecurity awareness and training programs, supporting internal audits, assisting with third-party risk management and contributing to risk management initiatives. This role offers the opportunity to work across various cybersecurity governance, risk and compliance areas while developing your career in the dynamic field of cybersecurity.
 
 
 
 
 
 
 
 
 
 
 Key Responsibilities include
 
 
 :
 
 
 <ul>
 <li>
 Assist in identifying, assessing, and reporting cybersecurity risks across the organization.
 </li>
 <li>
 Support the development and maintenance of risk registers, tracking identified risks, and assisting in risk mitigation strategies.
 </li>
 <li>
 Support the planning and execution of internal cybersecurity audits to assess adherence to cybersecurity and regulatory requirements.
 </li>
 <li>
 Assist in preparing audit documentation, audit reports, and follow-up on audit findings with relevant departments.
 </li>
 <li>
 Conduct periodic reviews of third-party cybersecurity posture and assist in monitoring vendor performance in relation to compliance and risk management requirements.
 </li>
 <li>
 Collaborate with the procurement and legal teams to ensure third-party cybersecurity requirements are adequately addressed in vendor contracts and service level agreements (SLAs).
 </li>
 <li>
 Design, develop and implement cybersecurity awareness and training programs in alignment with international standards and regulations (e.g., ISO 27001, NCA, SAMA, PCI DSS).
 </li>
 <li>
 Deliver periodic cybersecurity awareness sessions (online and/or in person). Monitor employee engagement and completion.
 </li>
 <li>
 Track and report on training &amp; phishing metrics to measure effectiveness and to identify risky areas for improvement.
 </li>
 <li>
 Plan and manage phishing simulations and analyze results.
 </li>
 <li>
 Governance of User Violations and Disciplinary Measures
 </li>
 <li>
 Maintain consistent communication about threats, trends, and best practices.
 </li>
 <li>
 Perform other duties as assigned by the GRC Manager.
 </li>
 </ul>
 
 
 
 
 
 Necessary Documents to Submit
 
 
 :
 
 
 <ul>
 <li>
 Resume/CV
 </li>
 <li>
 Bachelor's degree in computer science, information security or a related field.
 </li>
 <li>
 Relevant certifications (e.g., CompTIA Security+, ISO 27001 Foundations).
 </li>
 </ul>
 
 
 &nbsp;
 
 
 
 
 Why Join AMEX
 
 
 :
 
 
 <ul>
 <li>
 Working at American Express Saudi Arabia offers a unique opportunity to be part of a global brand with strong local presence. Employees benefit from competitive salaries, continuous training, and professional growth. The company fosters an inclusive and innovative work culture, led by strong leadership and a clear vision. With a focus on digital transformation and social responsibility, AMEX is a place where talent is valued and empowered.
 </li>
 </ul>
 
 
 
</div>

Cybersecurity GRC Analyst

Innovative Solutions

<div><h3 class="jobSectionHeader">Company Description</h3>
Innovative Solutions (IS) is a leading pure-player Cybersecurity company in the GCC, established in 2003 and headquartered in Riyadh, with operations in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our mission is to &lsquo;Bring Trust to Cyberspace&rsquo; and ensure &lsquo;Your Business, Secured&rsquo;. We offer comprehensive Cybersecurity Solutions and Services that include Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.<h3 class="jobSectionHeader">
Role Description</h3>
The SOC Analyst - Level 2 position at Innovative Solutions plays a pivotal role in our Security Operations Center (SOC). In this capacity, you will be tasked with monitoring security events, analyzing incidents, and implementing advanced response strategies to protect our clients' networks. Your expertise will guide incident response activities, enabling the identification and remediation of security threats effectively.<h3 class="jobSectionHeader">
Key Responsibilities</h3><ul>
<li>Conduct thorough analysis and investigation of security alerts and incidents.</li>
<li>Coordinate response actions and lead efforts on high-priority security incidents.</li>
<li>Utilize SIEM tools for threat detection and incident management.</li>
<li>Assist in the development of detection rules and incident response playbooks.</li>
<li>Provide mentorship and training to SOC Level 1 analysts.</li>
<li>Continuously evaluate and improve SOC processes and tools.</li>
<li>Collaborate with internal stakeholders and provide security recommendations based on analysis.</li>
</ul>Requirements<ul><li>
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.</li></ul><ul>
<li>A minimum of 2-4 years of experience in a SOC analyst role or similar position.</li>
<li>In-depth understanding of security technologies including SIEM, IDS/IPS, endpoint detection, and response tools.</li>
<li>Certifications such as Security+, CEH, or similar cybersecurity qualifications are advantageous.</li>
</ul>
Benefits<ul>
<li>Comprehensive training and development programs.</li>
<li>Opportunity for career growth and advancement.</li>
<li>Friendly and supportive work environment.</li></ul></div>

Security Operation Center Analyst - L2

Zoho

<div>
 
 Zoho is one of the world's most prolific software companies. With 55+ applications in nearly every major business category, including sales, marketing, customer service, accounting and back office operations, and an array of productivity and collaboration tools built from the ground up, Zoho has the depth and breadth to solve even the most complex business challenges.
 
 
 
 
 
 With more than 130 million+ users and over 18,000 employees across the globe, hundreds of thousands of companies rely on Zoho, every day to run their businesses, including Zoho itself. With 29 years of being private, bootstrapped and profitable, we understand what it takes to run a sustainable, resilient business.
 
 
 
 
 
 
 Job Title
 
 : SOC Analyst - L2
 
 
 
 Experience Level:
 
 5 to 8 years
 
 
 
 Work Location
 
 : Riyadh, Saudi Arabia
 
 
 
 
 
 
 Job Description:
 
 
 <ol>
 <li>
 Developing and implementing security and privacy policies and procedures to safeguard information assets with respect to regional laws.
 </li>
 <li>
 Conducting regular audits and assessments to ensure compliance with security and privacy policies and regulations.
 </li>
 <li>
 Collaborating with the Security and Privacy team in India and stakeholders to address security concerns.
 </li>
 <li>
 Providing awareness training to employees to promote a culture of security and privacy within the organization.
 </li>
 <li>
 Keeping up-to-date with the latest trends and developments in cybersecurity to mitigate risks proactively.
 </li>
 <li>
 Handling customer queries and answering security questionnaires for the Middle East region.
 </li>
 <li>
 Adequate knowledge about KSA region regulations and NCA.
 </li>
 </ol>
 
 
</div>

SOC Analyst - L2

Security Engineer

<div>Line of Service
Internal Firm Services
Industry/Sector
Not Applicable
Specialism
IFS - Internal Firm Services - Other
Management Level
Associate
Job Description &amp; Summary
At PwC, our people in managed services focus on a variety of outsourced solutions and support clients across numerous functions. These individuals help organisations streamline their operations, reduce costs, and improve efficiency by managing key processes and functions on their behalf. They are skilled in project management, technology, and process optimization to deliver high-quality services to clients.
 
 
Those in managed service management and strategy at PwC will focus on transitioning and running services, along with managing delivery teams, programmes, commercials, performance and delivery risk. Your work will involve the process of continuous improvement and optimising of the managed services process, tools and services.
Why PwC
Established in the region for over 40 years, PwC Middle East employs over 6,000 people across 12 countries: Bahrain, Egypt, Iraq, Jordan, Kuwait, Lebanon, Libya, Oman, Qatar, Saudi Arabia, Palestine and the United Arab Emirates. Complementing our depth of industry expertise and breadth of skills is our sound knowledge of local business environments across the Middle East region. Our tailored solutions help our clients meet the challenges and opportunities of doing business in the Middle East market, and beyond. 
 
Job Summary
A career in our Cyber technology services will allow you to work under the supervision of cyber cybersecurity leadership within the Cyber business unit consulting practice. Use strategic business consulting skills to work with clients through all stages of strategy-based transformation projects. Provide support on client assignments that help to develop a strategy and then refocus an organization on making that strategy a reality. We are a growing team and looking for dynamic, flexible, proactive and hardworking consultants who have a passion for shaping cybersecurity positively in the GCC over the coming years. We have a strong pipeline of large, transformational opportunities with our clients which will provide great opportunities for all our people to step up and play significant and rewarding roles in an entrepreneurial and innovation driven environment.
Roles &amp; Responsibilities
As a Senior Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:
Work under the supervision of cybersecurity leadership within the Cyber &amp; Digital Trust business unit consulting practice.
Support in the design and development of cybersecurity programs in different domains including the development of strategy, GRC, architecture, identity and access management and cybersecurity solutions based on leading practices such as NIST, CIS, ISO27001 and others.
Support the development and implementation of cybersecurity governance, risk and compliance frameworks aligned with NIST CSF, ISO 27001, CIS Controls, and local GCC regulatory requirements (e.g., NCA, SAMA, NESA, TDRA, NDMO).
Conduct cybersecurity risk assessments, maturity assessments, and gap analyses to benchmark client capabilities against industry standards and regulatory expectations.
Develop and refine cybersecurity policies, procedures, standards, and guidelines ensuring alignment with business objectives, compliance mandates and leading practices.
Support audit readiness and certification efforts for frameworks such as ISO 27001 and other related standards.
Design of cybersecurity strategies and roadmaps that balance risk management, business enablement, and digital transformation goals.
Work closely with cross-functional teams to define target operating models for cybersecurity functions, including governance structures, roles, and performance indicators.
Develop and execute cybersecurity awareness and culture programs. This includes designing tailored awareness campaigns, executive briefings, training programs, and behavior-change initiatives to foster a culture of digital trust and resilience.
Assist in the design of target technical security architecture for clients with deep understanding and analysis of emerging cybersecurity solutions including, but not limited to, threat intelligence, anti-advanced persistent threats, DLP, SIEM, next generation firewalls, analytics, enterprise incident response and others.
Support in the implementation of cybersecurity solutions at client premises and be able to work closely with security vendors and system integrators.
Communicate effectively (both verbal and writing) with executives, IT personnel, executives, and business users communities, translating complex cybersecurity concepts into actionable insights.
Support in coordinating, facilitating, and making presentations.
Support in business development activities, including preparation of technical and financial proposals and participation in client pursuits.
Work with colleagues across PwC Middle East offices on client engagements and internal initiatives as well as with international teams.
Conduct research on emerging cybersecurity technologies and disseminate knowledge to Cyber &amp; Digital Trust consultants and clients where required.
Assist in developing new service offerings for the Cyber &amp; Digital Trust business unit.
Build deep understanding of regional cybersecurity themes and trends, particularly those impacting clients in government, financial services, energy, and critical infrastructure. Work collaboratively with other cybersecurity experts to shape the future of our clients and to bring about positive change.
You will have access to all of the latest training and development tools and the support of the wider PwC network.
Additional Roles &amp; Responsibilities
Skills and Competencies
Strong understanding of emerging cybersecurity technologies and standards.
Experience in cybersecurity strategy development, operating model design, culture transformation, as well as cybersecurity governance, risk and compliance management.
Experience interpreting and applying GCC regulatory frameworks (NCA, SAMA, NESA, PDPL, etc.) and international leading practices (ISO 27001, NIST CSF, etc.).
Special experience in identity and access management, SIEM/SOC, security architecture, cloud and DLP is a plus.
Achievement oriented with the ability to be flexible and adaptive on a daily basis.
Excellent organisational skills, having the ability to prioritise workload whilst being resilient and able to cope well under pressure and meet tight deadlines.
Excellent problem solving skills with a structured thinking process.
Strong connections and relationships with clients in Saudi Arabia and the UAE is a plus.
Strong time-management and organizational skills.
Ability to learn new concepts and carry out technical research.
Proven IT skills in Microsoft Office and G-suite applications.
Language Skills: Excellent communication skills (verbal and written) in English (Arabic is a plus).
The ability and willingness to travel within the Middle East is a MUST.
Educational Qualifications &amp; Certifications
Education: B.A/ B.Sc. in Computer Engineering or related field. M.Sc. in Computer Engineering or related field is preferred. 
 
Candidates are expected to hold or be actively pursuing one or more of the globally recognized certifications relevant to Cybersecurity, Digital Trust and Project Management.
Minimum years experience required
<ul><li>1-3 Years of experience
</li></ul>Additional application instructions
<ul><li>N/A
</li></ul>Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Automation, Automation Framework Design and Development, Automation Solutions, Budgetary Management, Business Process Automation (BPA), Business Process Improvement, Business Process Outsourcing, Business Transformation, Communication, Continuous Process Improvement, Data Quality Automation, Deliverable Planning, Delivery Excellence, Design Automation, Digital Transformation, Emotional Regulation, Empathy, Inclusion, Intellectual Curiosity, Managed Services, Operational Excellence, Operational Performance Management (OPM) {+ 19 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Available for Work Visa Sponsorship?
Government Clearance Required?
Job Posting End Date</div>

GRC & Cloud Security Analyst

Tap Payments

<div>About Tap
Tap Payments is revolutionizing online payments across the MENA region by connecting businesses with simple, unified payment experiences. We need exceptional talent to help us on this journey. 
The Cybersecurity Team 
Do you get all excited when you hear terms like vulnerability assessment, penetration tests, security verification processes, or intrusion detection? If so, you are in the right place. Our Cybersecurity Team spends every waking (and sleeping) minute detecting security threats before they happen. Join the band and help us build ultra-secure payments technology for our customers. 
As a Tapster you will:<ul>
<li>
 Ensure full alignment with SAMA Cybersecurity Framework and Tap&rsquo;s group standards.</li>
<li>Maintain and update cybersecurity documentation including policies, procedures, standards, and control registers.</li>
<li>Support internal and external cybersecurity audits and regulatory reviews.</li>
<li>Prepare reports and responses to regulatory inquiries, inspections, and follow-ups.</li>
<li>Coordinate remediation activities and track progress of corrective action plans.</li>
<li>Conduct risk assessments and control testing across systems and environments.</li>
<li>Identify, evaluate, and document cybersecurity risks, recommending mitigation actions.</li>
<li>Support threat intelligence analysis and vulnerability management.</li>
<li>Facilitate penetration tests and follow-up on findings closure.</li>
<li>Participate in risk review committees and ensure cyber risk reporting accuracy.</li>
<li>Support daily monitoring of security alerts, logs, and anomalies through the SOC.</li>
<li>Coordinate incident response and forensic investigations when required.</li>
<li>Ensure timely containment, eradication, and recovery for security events.</li>
<li>Maintain incident registers and lessons-learned reports.</li>
<li>Validate that monitoring tools and SIEM configurations align with group baselines.</li>
<li>Support implementation of endpoint protection, access control, and encryption mechanisms.</li>
<li>Verify compliance with system hardening, patching, and network segmentation policies.</li>
</ul><ul><li>Oversee secure integration of new applications, APIs, and third-party services.</li>
<li>Participate in architecture reviews to validate security-by-design principles.</li>
</ul><ul><li>Review change management and deployment activities for cybersecurity impact.</li>
</ul><ul><li>Deliver cybersecurity awareness and phishing simulation campaigns for KSA staff.</li>
<li>Promote a culture of security and compliance within the organization.</li>
<li>Contribute to the development of new security initiatives and group Projects.</li>
<li>Monitor emerging threats, tools, and best practices to enhance Tap&rsquo;s defense posture.</li>
<li>Support periodic business continuity and disaster recovery testing.</li></ul> 
 
What you will bring to the party:<ul>
<li>
 Proficient with SIEM, IDS/IPS, endpoint protection, and vulnerability management tools.</li>
<li>Strong understanding of SAMA Cybersecurity Framework, ISO 27001, NSIT and PCI DSS.</li>
<li>Knowledge of AWS cloud security and identity management (IAM, MFA, encryption).</li>
<li>Experience in implementing and auditing cybersecurity controls in regulated financial or fintech environments.</li>
<li>Familiarity with KSA laws, including the Personal Data Protection Law (PDPL).</li>
<li>Minimum 3&ndash;5 years of experience in cybersecurity, IT risk, or information security roles.</li>
<li>Certifications preferred: CISSP, CISM, CEH, ISO 27001 LA/LI, CompTIA Security+.</li>
<li>Strong analytical and problem-solving skills.</li>
<li>High attention to detail and integrity.</li>
<li>Excellent written and verbal communication skills in English and Arabic.</li>
<li>Collaborative mindset with the ability to work cross-functionally.</li></ul> 
 
Are you ready to shape the future of payments in MENA?</div>

Cybersecurity Consultant

<div>Line of Service
Internal Firm Services
Industry/Sector
Not Applicable
Specialism
IFS - Internal Firm Services - Other
Management Level
Senior Associate
Job Description &amp; Summary
At PwC, our people in managed services focus on a variety of outsourced solutions and support clients across numerous functions. These individuals help organisations streamline their operations, reduce costs, and improve efficiency by managing key processes and functions on their behalf. They are skilled in project management, technology, and process optimization to deliver high-quality services to clients.
 
 
Those in managed service management and strategy at PwC will focus on transitioning and running services, along with managing delivery teams, programmes, commercials, performance and delivery risk. Your work will involve the process of continuous improvement and optimising of the managed services process, tools and services.
<div><div>This role is ideal for candidates experience in cloud security who are passionate about safeguarding cloud-based environments and applications. The successful candidate will assist in implementing, managing, and optimizing cloud security solutions, focusing on tools such as Microsoft 365 Security , Google Security &amp; Identity platforms.
</div><div>Roles and Responsibilities:
</div><div>Daily tasks and delivery expectation
</div><div><ul><li>Monitor, analyze, and respond to security alerts across multi-cloud platforms (Azure, AWS, GCP) using tools such as Microsoft Defender, Sentinel, and Google Security Command Center.
</li></ul></div><div><ul><li>Support identity and access management (IAM) implementation, including Zero Trust and Identity Governance practices for regulated sectors.
</li></ul></div><div><ul><li>Collaborate with PwC&rsquo;s Managed Cyber Defense and SOC teams on incident response and threat remediation activities.
</li></ul></div><div><ul><li>Assist in developing and enforcing cloud security policies aligned with regional frameworks (NCA ECC/CCC, SAMA CSF, UAE ISR).
</li></ul></div><div><ul><li>Contribute to configuration and deployment of cloud-native security controls aligned with CIS, NIST, and ISO 27001 standards.
</li></ul></div><div><ul><li>Prepare technical and client-facing reports, dashboards, and recommendations to improve cloud security posture.
</li></ul></div><div><ul><li>Work closely with multidisciplinary teams to integrate security-by-design into client cloud transformation initiatives.
</li></ul></div><div>Expected Skills:
</div><div>Specific learned abilities or technical skills
</div><div><ul><li>Hands-on experience with cloud security tools, particularly:
</li></ul></div><div><ul><li>Microsoft 365 Security Suite, including Defender for Identity, Advanced Threat Protection, and Compliance tools.
</li></ul></div><div><ul><li>Google Security, including Google&rsquo;s Chronicle Detection Language (YARA-L and UDM Query Language) .
</li></ul></div></div><div><div><ul><li>Understanding of cloud environments and technologies such as Azure AD, Google Workspace, and Microsoft 365.
</li></ul></div><div><ul><li>Familiarity with security frameworks like ISO 2701 7 , NCA, CIS Benchmarks, and NIST.
</li></ul></div><div><ul><li>Basic knowledge of incident response processes and risk management in cloud environments.
</li></ul></div><div><ul><li>Awareness of Zero Trust, DevSecOps , and automation in cloud environments.
</li></ul></div><div><ul><li>F oundational understanding of network security and secure configurations.
</li></ul></div><div><ul><li>Strong analytical and problem-solving skills.
</li></ul></div><div><ul><li>Ability to work collaboratively in a team-oriented environment.
</li></ul></div><div><ul><li>Excellent communication skills, with the ability to convey technical findings to diverse audiences.
</li></ul></div><div><ul><li>Eagerness to learn and adapt to new cloud security technologies and frameworks. 
</li></ul></div><div>Expected Competencies:
</div><div>Values, behaviors &amp; attitude
</div><div><ul><li>Leadership
</li></ul></div><div><ul><li>Strategic mindset
</li></ul></div><div><ul><li>Stakeholder management
</li></ul></div><div><ul><li>Ability to influence
</li></ul></div><div><ul><li>Communicate with impact
</li></ul></div><div><ul><li>Project management
</li></ul></div><div><ul><li>Results driven
</li></ul></div><div><ul><li>Drive organizational excellence
</li></ul></div></div><div><div>Required Language Skills:
</div><div>Proficient in written and spoken English. Arabic is a plus
</div><div>Minimum Education and Specific Qualification:
</div><div><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or a related field.
</li></ul></div><div><ul><li>Relevant certifications such as Microsoft Security, Compliance, and Identity Fundamentals (SC-900) or Google Cloud Associate Engineer (preferred).
</li></ul></div><div><ul><li>Knowledge or awareness of NCA CCC/CCSP, SAMA CSF, or UAE ISR frameworks is advantageous .
</li></ul></div></div>Minimum years experience required
<ul><li>5-7 years of experience in cloud security or a related cybersecurity role.
</li></ul>Additional application instructions
<ul><li>N/A
</li></ul>Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Automation, Automation Framework Design and Development, Automation Solutions, Budgetary Management, Business Process Automation (BPA), Business Process Improvement, Business Process Outsourcing, Business Transformation, Communication, Continuous Process Improvement, Creativity, Data Quality Automation, Deliverable Planning, Delivery Excellence, Design Automation, Digital Transformation, Embracing Change, Emotional Regulation, Empathy, Inclusion, Intellectual Curiosity {+ 24 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Available for Work Visa Sponsorship?
Government Clearance Required?
Job Posting End Date</div>

Cloud Security SecOps Specialist

Explore 149+ Cybersecurity analyst in Riyadh Saudi Arabia this November. Find roles across top companies and apply now to boost your career.