fraud analyst

governance & compliance senior specialist Jobs in Riyadh

governance & compliance senior specialist

senior offensive cybersecurity consultant Jobs in Riyadh

senior offensive cybersecurity consultant

assistant manager - application security Jobs in Riyadh

assistant manager - application security

associate director-cybersecurity Jobs in Riyadh

associate director-cybersecurity

cybersecurity grc analyst

American Express Saudi Arabia

<div>
 
 
 Company Description
 
 
 
 American Express Saudi Arabia, established in 1999, is a leading financial company in the Kingdom, renowned for delivering excellence and innovative payment solutions. Our mission is to empower individuals and businesses to progress through advanced payment solutions like Credit Cards, Charge Cards, and other services tailored to fit diverse needs. We lead the Card Business Payment sector, helping customers manage expenses and cash flow effectively. Join us to be part of a team that provides world-class experiences and business success.
 
 
 
 
 
 
 About the Role:&nbsp;
 
 
 We are seeking a motivated and detail-oriented Cybersecurity GRC Specialist to join our growing cybersecurity team. The ideal candidate will play a key role in developing and delivering cybersecurity awareness and training programs, supporting internal audits, assisting with third-party risk management and contributing to risk management initiatives. This role offers the opportunity to work across various cybersecurity governance, risk and compliance areas while developing your career in the dynamic field of cybersecurity.
 
 
 
 
 
 
 
 
 
 
 Key Responsibilities include
 
 
 :
 
 
 <ul>
 <li>
 Assist in identifying, assessing, and reporting cybersecurity risks across the organization.
 </li>
 <li>
 Support the development and maintenance of risk registers, tracking identified risks, and assisting in risk mitigation strategies.
 </li>
 <li>
 Support the planning and execution of internal cybersecurity audits to assess adherence to cybersecurity and regulatory requirements.
 </li>
 <li>
 Assist in preparing audit documentation, audit reports, and follow-up on audit findings with relevant departments.
 </li>
 <li>
 Conduct periodic reviews of third-party cybersecurity posture and assist in monitoring vendor performance in relation to compliance and risk management requirements.
 </li>
 <li>
 Collaborate with the procurement and legal teams to ensure third-party cybersecurity requirements are adequately addressed in vendor contracts and service level agreements (SLAs).
 </li>
 <li>
 Design, develop and implement cybersecurity awareness and training programs in alignment with international standards and regulations (e.g., ISO 27001, NCA, SAMA, PCI DSS).
 </li>
 <li>
 Deliver periodic cybersecurity awareness sessions (online and/or in person). Monitor employee engagement and completion.
 </li>
 <li>
 Track and report on training &amp; phishing metrics to measure effectiveness and to identify risky areas for improvement.
 </li>
 <li>
 Plan and manage phishing simulations and analyze results.
 </li>
 <li>
 Governance of User Violations and Disciplinary Measures
 </li>
 <li>
 Maintain consistent communication about threats, trends, and best practices.
 </li>
 <li>
 Perform other duties as assigned by the GRC Manager.
 </li>
 </ul>
 
 
 
 
 
 Necessary Documents to Submit
 
 
 :
 
 
 <ul>
 <li>
 Resume/CV
 </li>
 <li>
 Bachelor's degree in computer science, information security or a related field.
 </li>
 <li>
 Relevant certifications (e.g., CompTIA Security+, ISO 27001 Foundations).
 </li>
 </ul>
 
 
 &nbsp;
 
 
 
 
 Why Join AMEX
 
 
 :
 
 
 <ul>
 <li>
 Working at American Express Saudi Arabia offers a unique opportunity to be part of a global brand with strong local presence. Employees benefit from competitive salaries, continuous training, and professional growth. The company fosters an inclusive and innovative work culture, led by strong leadership and a clear vision. With a focus on digital transformation and social responsibility, AMEX is a place where talent is valued and empowered.
 </li>
 </ul>
 
 
 
</div>

Cybersecurity GRC Analyst

Tabby

<div><h3 class="jobSectionHeader">Description</h3><div> 
The IT Risk Analyst will identify, assess, and monitor IT and cybersecurity risks, develop mitigation strategies, and ensure compliance with regulations.</div><h3 class="jobSectionHeader"> 
Key Responsibilities</h3> 
<ul>
<li>
Risk assessment and analysis: Identify and evaluate IT system and process risks, including cybersecurity threats, vulnerabilities, and potential consequences.</li>
<li>Strategy and mitigation: Develop and implement risk management policies, procedures, and security protocols, such as firewalls and data encryption.</li>
<li>Monitoring and reporting: Track and monitor risk activities, investigate security incidents, and prepare reports on key metrics and findings for stakeholders.</li>
<li>Compliance and governance: Ensure compliance with regulatory standards and advise on internal controls to improve the organization's risk posture.</li>
<li>Collaboration: Work with other IT personnel and stakeholders to manage security needs and communicate findings, risks, and recommendations.</li>
<li>Awareness: Build understanding and awareness of cybersecurity risks throughout the organization.</li></ul><div></div><h3 class="jobSectionHeader"> 
Skills, Knowledge &amp; Expertise</h3> 
<div></div><ul><li>
Strong risk management and analysis background</li>
<li>Cybersecurity principles and incident response</li>
<li>Experience in IT audit and internal controls</li>
<li>Experience with Governance, Risk, and Compliance (GRC) frameworks (e.g., ISO 27001)</li>
<li>Proficiency in Data analysis tools (e.g., SQL, Excel)</li>
<li>Skilled in Python for scripting and automation</li>
<li>Strong analytical and problem-solving abilities</li>
<li>Good communication and presentation skills</li>
<li>Critical thinking</li>
<li>Ability to work collaboratively with diverse teams</li>
<li>Adaptability to a constantly evolving threat landscape</li></ul> 
<h3 class="jobSectionHeader">
About Tabby</h3><div>
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money. 
 
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. 
 
Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region. 
 
Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.</div></div>

IT Risk Analyst

Devoteam

<div>Company Description 
We are entrepreneurs in disruptive technology, at Devoteam, we deliver innovative technology consulting for business. Digital Transformakers, we are 7,000+ professionals across EMEA dedicated to ensuring our clients win their digital battle. We improve business performance making their companies truly digital. We advise our clients and build IT infrastructure for digital, making sure people are along for the ride. 
 
Devoteam Middle East, we are the region's leading consulting firm delivering innovative Business &amp; Technology Consulting &amp; Solutions. Our 14 years of existence anchored in technologies that enables our clients business to flourish, accordingly our focus is to help our clients' win the digital battle, adapted to our clients&rsquo; business challenges, with a unique consideration to its impact on their systems and structures. 
 
To know more about us, please visit: www.devoteam.com 
Job Description 
<ul><li>
Lead GRC and cybersecurity projects for enterprise clients.</li><li>
Assess, design, and implement security frameworks, policies, and controls.</li><li>
Conduct risk assessments, audits, and compliance reviews.</li><li>
Advise clients on regulatory requirements (ISO 27001, NIST, GDPR, etc.).</li><li>
Collaborate with cross-functional teams to strengthen security posture.</li></ul> 

Qualifications 
<ul><li>
7+ years in cybersecurity, GRC, or related roles.</li><li>
Strong knowledge of cybersecurity frameworks and compliance standards.</li><li>
Excellent problem-solving and communication skills.</li><li>
Proven experience leading client engagements and projects.</li></ul> 

Additional Information 
Business Unit: Cybertrust
Level: Mid - Senior Level
Knowing that success is the result of collaboration. Alone, we go faster, but together, we go further.
To know more about us, please visit: www.devoteam.com</div>

Senior Cyber Security GRC Consultant

Node Technologies

<div>
 
 Project Manager (Digital Transformation &amp; IT Projects)
 
 
 
 
 
 Job Summary:
 
 
 We are seeking an experienced Project Manager to lead digital transformation and IT initiatives. The role involves planning, executing, and overseeing technology-driven projects to ensure alignment with business goals, timelines, and budgets. The ideal candidate combines strategic thinking, leadership, and technical expertise to drive successful transformation outcomes.
 
 
 
 
 
 Key Responsibilities:
 
 
 &bull; Lead and manage end-to-end digital transformation projects, including IT infrastructure, cybersecurity, cloud migration, and software implementation.
 
 
 &bull; Define project scope, objectives, deliverables, and timelines aligned with organizational priorities.
 
 
 &bull; Develop and manage project plans, budgets, resources, and risk mitigation strategies.
 
 
 &bull; Coordinate cross-functional teams and vendors to ensure smooth execution and collaboration.
 
 
 &bull; Monitor progress, track milestones, and report performance and risks to senior management.
 
 
 &bull; Ensure compliance with relevant standards, frameworks, and best practices (PMP, Prince2, Agile, ITIL).
 
 
 &bull; Foster innovation, problem-solving, and continuous improvement across project teams.
 
 
 
 
 
 Qualifications &amp; Skills:
 
 
 &bull; PMP or Prince2 certification required; ITIL certification preferred.
 
 
 &bull; Minimum 5 years of experience managing digital transformation or large-scale IT projects.
 
 
 &bull; Strong understanding of IT governance, risk management, and compliance (GRC).
 
 
 &bull; Experience with process automation, cloud technologies, and enterprise IT solutions.
 
 
 &bull; Proficient in project management tools (Microsoft Project, Jira, Trello, Asana).
 
 
 &bull; Excellent leadership, communication, and stakeholder management skills.
 
 
 
 
 
 Preferred:
 
 
 &bull; Lean Six Sigma certification.
 
 
 &bull; Cloud certifications (AWS, Azure, Google Cloud).
 
 
 &bull; Experience in cybersecurity compliance (ISO 27001, NIST, PCI-DSS).
 
</div>

Information Technology Project Manager

<li>Tech for People Unlocks the Future
At Devoteam, we believe that technology, combined with strong human values, can actively drive change for the better. Discover how Tech for People is shaping the future, creating a positive impact on individuals and the world around us.
 
With over 25 years of passion for technology and a presence in 18+ countries across EMEA and beyond, we are committed to leveraging innovation, expertise, and human-centric values to make a difference.
Devoteam Culture &amp; Values:
 
True innovation is born from a powerful culture, fused with meaningful values.
Culture:
Fair and courageous
 
Everyone is treated fairly &ndash; this fuels bravery. At Devoteam, we always make fair decisions. We listen and are willing to be challenged, taking courageous decisions as a result. We help our employees to progress at every step and congratulate those who deserve it.
 
 
Ambition and results
 
Ambition is nurtured at every step &ndash; this drives results. We are ambitious entrepreneurs with a taste for performance, growth and celebrating success. Commitments are always kept as we seek to achieve profitable growth to create value and employment. We aim to bring as much value as possible to our clients, at every touchpoint.
 
 
Learning and innovating
 
Curiosity and learning are at our core &ndash; this stimulates innovation. At Devoteam, we are curious. We learn and embrace innovation constantly to meet challenges and build partnerships of excellence.
 
 
Caring and sharing
 
A caring attitude is infused into our culture &ndash; this encourages sharing. We believe in the power of teams, we promote support and collaboration.
 
At Devoteam, we care about our teams and want to work in a positive, productive environment. We support the development of talent and careers,
Values:
1. Respect
 
2. Frankness
 
3. Passion</li>
 <div><ul><li>Develop and implement comprehensive cybersecurity strategies and frameworks.
</li><li>Manage and deliver cybersecurity projects from planning to execution.
</li><li>Ensure compliance with NCA, SAMA, and other regulatory standards.
</li><li>Design and review cybersecurity architectures aligned with business and security objectives.
</li><li>Contribute to business development by creating tailored proposals and cybersecurity solutions for clients.
</li><li>Collaborate with cross-functional teams to enhance security posture and risk management.</li></ul></div>
 <div><ul><li>Proven experience in cybersecurity consulting, strategy, and GRC.
</li><li>Strong knowledge of NCA and SAMA cybersecurity frameworks.
</li><li>Excellent communication and client engagement skills.
</li><li>Ability to translate business needs into effective security solutions.</li></ul></div>
 <li>Business Unit: Cybertrust
Level: Manager Level
Knowing that success is the result of collaboration. Alone, we go faster, but together, we go further.
To know more about us, please visit: www.devoteam.com</li>

Consulting Manager - Strategy and GRC

Sscegypt

Customer Success Manager (CSM),plays a crucial role inensuring client satisfaction and retention by guiding them through their journey with our services, from onboarding to long-term usage.They build relationships, address concerns, and identify opportunities for growth and expansion.Key Responsibilities of a Success Manager (CSM): Customer Onboarding and Training:Guiding new customers through the initial stages of adoption and ensuring they understand how to use the product or service effectively. Relationship Management:Building and maintaining strong, trusting relationships with key client stakeholders. Proactive Issue Resolution:Identifying potential problems early and working to solve them before they impact customer satisfaction. Performance Monitoring:Tracking and analyzing customer usage, identifying trends, and flagging areas for improvement. Customer Success Planning:Helping clients develop and achieve their goals using the product or service. Up-selling and Cross-selling:Identifying opportunities to expand client relationships and increase revenue. Internal Collaboration:Working with sales, product, and other internal teams to ensure client success. Feedback Collection:Gathering customer feedback and providing it to internal teams to improve the product or service.A Cyber Security Pre-sales Consultant isresponsible for driving revenue growth by providing technical expertise, conducting services demonstrations, mainly in the area of GRC and assisting in the development of proposals and solutions for clients.They act as a trusted advisor, understanding client needs and communicating insights to the sales team.The services provided in this domain (IT framework, ISO 27001, CCC, GRC domain, .etc)Key Responsibilities: Technical Expertise:Possess a deep understanding of cybersecurity frameworks, products, and services. Solution Design:Develop and present tailored security solutions that meet client needs, often including designs, proposals, and technical documentation. Customer Engagement:Build relationships with clients, understand their challenges, and offer expert advice. Sales Support:Work closely with the sales team to qualify opportunities, prepare proposals, and assist in closing deals. Product Demonstrations:Conduct product demos and proof-of-concept sessions to showcase solutions. Requirements Gathering:Collect and analyze customer requirements, conducting workshops and presentations to understand their needs. Commercial Documents:Assist in creating and updating commercial documents like RFPs and RFIs. Staying Current:Keep up with industry trends, competitor offerings, and emerging technologies. Collaboration:Work with internal teams, partners, and vendors to ensure successful solution delivery.<img src="https://www.jobg8.com/Tracking.aspx?m1MhrCgiSOhtx8g2aWCYwsTa2UWIMSugc" width="0" height="0" />

Customer Success Manager

Tap Payments

<div>About Tap
Tap Payments is revolutionizing online payments across the MENA region by connecting businesses with simple, unified payment experiences. We need exceptional talent to help us on this journey. 
The Cybersecurity Team 
Do you get all excited when you hear terms like vulnerability assessment, penetration tests, security verification processes, or intrusion detection? If so, you are in the right place. Our Cybersecurity Team spends every waking (and sleeping) minute detecting security threats before they happen. Join the band and help us build ultra-secure payments technology for our customers. 
 
As a Tapster you will:<ul>
<li>
 Take ownership of cybersecurity programs related to security policies, vendor risk and compliance management, regulatory audits and compliance management, metrics, risk and performance indicators, management reporting, security awareness and training</li>
<li>Be responsible for the development of security risk management using continuous self-assessments and executive reporting</li>
<li>Ensure that robust information security programs and strategies are developed and maintained for compliance with the organisation's information security policies, applicable laws, regulatory requirements and best practices.</li>
<li>Develop and maintain the information security strategy for the organisation and ensure alignment with the enterprise strategy and goals through robust risk management of IT business.</li>
<li>Coordinate the activities of the CyberSecurity Steering Committee and ensure that the activities and decisions of the committee are documented, implemented and monitored for compliance.</li>
<li>Monitor projects (change initiatives) to identify and fix security gaps as well as improve system availability and usability.</li>
<li>Work closely with business partners to understand business drivers and market requirements and provide leadership to the technology group in order to create the required protection for the solutions in the required timeframes.</li>
<li>Coordinate the development, maintenance and monitoring of security policies and procedures across the organisation while ensuring that such policies conform to regulatory standards and other relevant information security frameworks such as the SAMA Cybersecurity Framework, NCA, NIST (National Institute of Standards and Technology), COBIT (Control Objectives for Information and Related Technologies), and ISO/IEC 27K series.</li>
<li>Carry out other duties, as assigned based on the demands of the business and growth of the role.</li></ul> 
What you will bring to the party:<ul>
<li>
 6-8 years experience in leading a cybersecurity or similar function</li>
<li>Degree in Engineering or Computer Science</li>
<li>Certification in CISSP, CISM, CISA, OSCP, CEH, and/or other technical certifications</li>
<li>Track record of leading distributed teams and leading delivery of complex, multi-faceted technology assessment and compliance initiatives</li>
<li>Experience managing large cybersecurity teams with a global presence</li>
<li>Deep experience in understanding regulatory and industry standards such as PCI, SOX 404, GLBA ISO standards, FFIEC exams, NIST framework, SSAE, etc</li>
<li>Hands-on leadership experience in authoring security policies, developing standards, and deploying GRC solutions to effectively manage and measure on the cyber risk posture</li>
<li>Technical ability to understand and solve complex cybersecurity challenges, with a track record of leading the delivery of complex, multi-faceted technology initiatives</li>
<li>Excellent written and verbal communication skills, having worked with executive management</li>
<li>Experience in presenting security risks to non-technical executives</li>
<li>Attested ability to establish and sustain effective, professional relationships with product and business managers; work closely with business partners to understand business drivers and market requirements; and provide leadership to the technology group in order to create the required protection for the solutions in the required time frames.</li>
<li>High degree of technical complexity and conservancy and familiarity with complex global information security infrastructures</li>
<li>Experience with a wide array of security platforms, protocols, tools, and technologies.</li>
<li>Knowledge of/experience with international compliance requirements/standards</li>
<li>Fluency in spoken and written English is essential, Arabic is a plus</li></ul> 
 
Are you ready to shape the future of payments in MENA?</div>

Head, Cybersecurity

Explore 165+ Cybersecurity grc analyst in Riyadh this November. Find roles across top companies and apply now to boost your career.