business analyst

data analyst

network asst analyst

assistant manager - application security Jobs in Riyadh

assistant manager - application security

assistant manager - cyber security (pre-sales) Jobs in Riyadh

assistant manager - cyber security (pre-sales)

information security analyst

Innovative Solutions

<div><h3 class="jobSectionHeader">Company Description</h3>
Innovative Solutions (IS) is a premier cybersecurity company in the GCC, founded in 2003 and based in Riyadh, with operations in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We provide comprehensive cybersecurity solutions and services, including Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services, with a commitment to 'Bring Trust to Cyberspace'.<h3 class="jobSectionHeader">
Role Description</h3>
Results-driven Experience Engineer with expertise in data protection, database activity monitoring, and data security governance, specializing in deploying and managing Imperva Data Security solutions to ensure data confidentiality, integrity, regulatory compliance, and the prevention of unauthorized access and sensitive data risks.<h3 class="jobSectionHeader">
Key Responsibilities</h3><ul>
<li>Administer and maintain Imperva Data Security Suite including Database Activity Monitoring (DAM), Data Masking, and Data Risk Analytics.</li>
<li>Implement security policies to protect sensitive business data across databases, file systems, and cloud storage.</li>
<li>Monitor, analyze, and respond to data security alerts generated by Imperva solutions.</li>
<li>Collaborate with application and DBA teams to enforce data access control policies and minimize insider threats.</li>
<li>Integrate Imperva alerts into SIEM for centralized monitoring and compliance reporting.</li>
<li>Support audits by generating and maintaining detailed data security reports.</li>
</ul>
Requirements<ul>
<li>
Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.</li>
<li>At least 3 years of experience in database design, architecture, and administration.</li>
<li>Data Security &amp; Governance: Imperva DAM, Imperva Data Risk Analytics, Data Masking, DC &amp; DLP solutions.</li>
<li>Database Platforms: Oracle, Microsoft SQL Server, MySQL, PostgreSQL (Security
</li><li>hardening &amp; activity monitoring)</li>
<li>Compliance &amp; Audit: ISO 27001, NCA ECC, GDPR, SOX compliance reporting</li>
<li>Networking &amp; Integration: SIEM integration (QRadar, Splunk), LDAP/AD authentication Policies</li>
</ul>
Certifications and Training<ul>
<li>
Imperva Certified Implementation Specialist (Data Security)</li>
<li>Imperva Data Risk Analytics &amp; DAM Training</li>
<li>CompTIA CySA+ (Cybersecurity Analyst)</li>
<li>ISO 27001 Lead Implementer (Foundation)</li>
<li>SANS SEC 503: Intrusion Detection in Depth.</li></ul></div>

Database Access Management (RE)

COGNNA

<div>
 We are seeking a GRC Expert with 4+ years of hands-on experience to support the operation of our GRC department. This role requires a strong background in international certification frameworks (ISO 27001, SOC 2), comprehensive Risk Management experience, and specific expertise in Identity and Access Management (IAM) governance. You will be instrumental in leveraging our automated compliance platform (Vanta) to streamline evidence collection, manage audits, and ensure continuous compliance.
 
 
 
 Compliance &amp; Certification Management
 
 
 
 <ul>
 <li>
 Lead the preparation and execution of external audits for ISO 27001 and SOC 2 (Type 1 &amp; 2) certifications
 </li>
 <li>
 Manage compliance with local Saudi regulations, specifically NCA ECC and SAMA cybersecurity frameworks
 </li>
 <li>
 Utilize the Vanta platform to map internal controls to regulatory requirements (Custom Frameworks) and automate evidence collection
 </li>
 <li>
 Monitor compliance posture daily, ensuring all automated tests in Vanta are passing and remediating gaps promptly
 
 
 </li>
 </ul>
 
 Identity &amp; Access Management (IAM) Governance
 
 
 
 <ul>
 <li>
 Oversee the IAM lifecycle from a governance perspective, ensuring "Least Privilege" and "Need-to-Know" principles are enforced
 </li>
 <li>
 Manage and execute Quarterly Access Reviews (User Access Reviews) campaigns within Vanta
 </li>
 <li>
 Monitor Identity Provider (IdP) integrations (e.g., Okta, Azure AD, Google Workspace) to ensure 100% MFA adoption and timely offboarding of terminated users
 </li>
 <li>
 Review and approve privileged access requests and ensure proper documentation of business needs
 
 
 </li>
 </ul>
 
 Risk Management
 
 
 
 <ul>
 <li>
 Maintain and update the organizational Risk Register
 </li>
 <li>
 Conduct periodic risk assessments, identifying threats and vulnerabilities, and tracking risk treatment plans to closure
 </li>
 <li>
 Perform Third-Party Risk Management (TPRM) assessments for new and existing vendors
 
 
 </li>
 </ul>
 
 Policy &amp; Audit Operations
 
 
 
 <ul>
 <li>
 Review and update information security policies and procedures annually or as needed
 </li>
 <li>
 Coordinate internal audits and pre-assessments to ensure readiness for external certification bodies
 </li>
 <li>
 Assist in responding to client security questionnaires and maintaining the Vanta Trust Center
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Minimum of 4 years of dedicated experience in GRC, Information Security, or IT Audit
 </li>
 <li>
 Deep understanding of ISO 27001 and SOC 2 controls
 </li>
 <li>
 Familiarity with NCA ECC and SAMA regulations
 </li>
 <li>
 Experience with automated GRC platforms
 </li>
 <li>
 Solid understanding of IAM concepts (RBAC, SSO, MFA, PAM)
 </li>
 <li>
 Proficiency in risk assessment methodologies (e.g., ISO 27005, NIST SP 800-30)
 
 
 </li>
 </ul>
 
 Certifications
 
 
 
 <ul>
 <li>
 Holding at least one relevant certification is preferred (e.g., CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor)
 
 
 </li>
 </ul>
 
 Soft Skills
 
 
 
 <ul>
 <li>
 Excellent communication skills in English (Arabic is a strong plus)
 </li>
 <li>
 Ability to work independently and manage multiple audit timelines simultaneously
 </li>
 <li>
 Strong analytical and problem-solving skills
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 💰
 
 Competitive Package
 
 - Salary + equity options + performance incentives
 
 
 🧘
 
 Flexible &amp; Remote
 
 - Work from anywhere with an outcomes-first culture
 
 
 🤝
 
 Team of Experts
 
 - Work with designers, engineers, and security pros solving real-world problems
 
 
 🚀
 
 Growth-Focused
 
 - Your ideas ship, your voice counts, your growth matters
 
 
 🌍
 
 Global Impact
 
 - Build products that protect critical systems and data
</div>

GRC Expert

Saudi Railway Company

<div>
 
 
 Responsibilities :
 
 
 <ul>
 <li>
 Help Tests, implements, deploys, maintains, and administers hardware and software that protects and defends systems and networks against cybersecurity threats in ICS/OT environments.
 </li>
 <li>
 Uses data collected from a variety of cybersecurity tools to analyze events that occur within ICS/OT environments to detect and mitigate cybersecurity threats.
 </li>
 <li>
 Help Identifies, assesses, and manages cybersecurity risks within ICS/OT environments.
 </li>
 <li>
 Provide support to Evaluates and analyzes the effectiveness of existing cybersecurity controls and provides feedback and recommendations based on assessments.
 </li>
 <li>
 Investigates, analyzes, and responds to cybersecurity incidents within ICS/OT environments.
 </li>
 <li>
 Use cybersecurity products and security control technologies to reduce identified risk to an acceptable level.
 </li>
 <li>
 Document and escalate incidents that may cause immediate or ongoing impact.
 </li>
 <li>
 Support performing cybersecurity reviews and identify security gaps in security architecture to inform risk mitigation strategies.
 </li>
 <li>
 Provide timely detection, identification and alerting of possible attacks, anomalous activities and misuse activities and distinguish them from benign activities.
 </li>
 <li>
 Use cyber defense tools to monitor and analyze system activity continuously to identify malicious activity.
 </li>
 <li>
 Periodically review cybersecurity strategy, policies, and related documents to maintain compliance with applicable legislation and regulation.
 </li>
 <li>
 Work with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues.
 </li>
 <li>
 Provide summary reports of network events and other cybersecurity-relevant activities in line with organizational policies and requirements.
 </li>
 <li>
 Participate in cybersecurity audits to assess an organization&rsquo;s compliance with applicable requirements, policies, standards, and controls.
 </li>
 <li>
 Support in preparing audit reports and communicating them to authorized parties.
 </li>
 </ul>
 
 
 
 
 
 Experience :
 
 
 <ul>
 <li>
 Minimum 4 years related experience .
 </li>
 </ul>
 
 
 
 
 
 Qualification :
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cyber Security, Computer Engineering, Information Technology .
 </li>
 </ul>
 
 
</div>

OT Cybersecurity Specialist

NTT DATA

<div>Make an impact with NTT DATA 
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion &ndash; it&rsquo;s a place where you can grow, belong and thrive.<div>
Key responsibilities:</div><div><ul><li>
Inputs into the design, implementation, and management of identity and access management processes and systems.</li><li>
Inputs into the development of access policies, procedures, and guidelines to ensure data security and compliance.</li><li>
Enforces access policies, procedures, and guidelines to ensure data security and compliance.</li><li>
Manages the provisioning and de-provisioning of user accounts, ensuring timely and accurate access to IT systems based on roles and responsibilities.</li><li>
Implements automated workflows for access requests, approvals, and revocations.</li><li>
Performs periodic security assessments of identity and access management systems to identify vulnerabilities and areas for improvement.</li><li>
Ensures compliance with industry regulations and cybersecurity standards.</li><li>
Monitors user access patterns, permissions, and entitlements to detect and mitigate unauthorized or unusual activities.</li><li>
Implements role-based access control (RBAC) and least privilege principles.</li><li>
Implements and manages multi-factor authentication (MFA) and single sign-on (SSO) solutions to enhance user authentication processes.</li><li>
Configures access controls based on user roles and data sensitivity.</li><li>
Manages incident response efforts related to identity and access management, including investigating breaches and unauthorized access attempts.</li><li>
Collaborates with vendors and service providers to implement and maintain identity and access management solutions.</li><li>
Evaluates vendor products and services for compatibility and effectiveness.</li><li>
Maintains thorough documentation of IAM processes, configurations, and changes.</li><li>
Generates regular reports on access management activities, compliance status, and potential risks.</li><li>
Performs any other related task as required.</li></ul></div><div>
To thrive in this role, you need to have:<ul><li>
Seasoned technical knowledge of IAM concepts, technologies, and protocols (LDAP, SAML, OAuth, etc.).</li><li>
Seasoned proficiency in scripting languages (Python, PowerShell) for automation is an advantage</li><li>
Seasoned knowledge of cybersecurity frameworks (NIST, ISO 27001) and regulatory requirements (GDPR, HIPAA)</li><li>
Great problem-solving and analytical skills with an ability to assess complex security scenarios</li><li>
Great communication skills to convey technical concepts to both technical and non-technical stakeholders</li><li>
Team-oriented attitude with the ability</li><li>
Ability to adapt to evolving IAM technologies, industry trends, and emerging threats</li><li>
Ability to use problem-solving techniques to define and resolve problems of complex scope.</li></ul></div><div>
Academic qualifications and certifications:<ul><li>
Bachelor's degree or equivalent in Computer Science, Information Technology, or related</li><li>
Relevant certifications such as CISSP, CISM, CompTIA Security+ are preferred.</li></ul></div><div>
Required experience:<ul><li>
Seasoned experience in identity and access management, cybersecurity, or related roles.</li><li>
Seasoned experience with IAM platforms such as Microsoft Identity Manager, SailPoint, or Okta.</li><li>
Seasoned experience working within a global IT Services organization.</li></ul></div>
Workplace type:
On-site Working
About NTT DATA 
NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world&rsquo;s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&amp;D.
Equal Opportunity Employer 
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.
Third parties fraudulently posing as NTT DATA recruiters
NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters&mdash;whether in writing or by phone&mdash;in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.</div>

Identity and Privileges Management Specialist

Specialized Technical Services – STS

<div>Our Culture:
At Zaintech we are proud of our culture and how it drives everything we do. We are looking for individuals who share our values and want to be part of a unique and engaging culture that revolves around collaboration and innovation. If you are looking for a role where you can drive engagement and excellence across teams through commitment and collaboration, and are someone who is customer-centric and appreciates an organization with uncompromised integrity that focuses on employee engagement then read on to learn more about how you can become part of the Zaintech family.
Our Code of Conduct: 
At Zaintech we strictly adhere to our code of conduct, which is there to serve as a moral compass, offering a framework for responsible behaviours and enabling ethical choices that cultivate positive relationships and a better future. It also outlines policies, standards, and procedures for our global operations, promoting integrity and ethical excellence across the countries we engage with.
Every year, all employees are required to review, comprehend, confirm, and adhere to the code of conduct. Additionally, all newly hired employees are subject to the same as part of their onboarding process.
Role Summary
Develops, updates and maintains cybersecurity policies to support and align with an organization&rsquo;s cybersecurity requirements. Identifies, assesses and manages an organization&rsquo;s cybersecurity risks to protect its information and technology assets. Ensures an organization&rsquo;s cybersecurity program complies with applicable requirements, policies and standards.
Duties and Responsibilities:<ul><li>Develop cybersecurity policies and related documentation.</li><li>Establish and maintain appropriate communication channels with stakeholders.</li><li>Review existing proposed policies and related documentation with stakeholders.</li><li>Cooperate with relevant regulatory agencies and other legal entities in any compliance reviews or investigations.</li><li>Develop Cybersecurity Awareness program</li><li>Promote awareness of cyber policy and strategy as appropriate among the organization's management and staff.</li><li>Interpret and apply applicable laws, statutes and regulatory documents to ensure they are reflected in the cybersecurity policies.</li><li>Create and publish the organization's cybersecurity policy</li><li>Monitor how effectively cybersecurity policies, principles and practices are implemented in the delivery of planning and management services.</li><li>Review, conduct, or participate in audits of cyber programs and projects.</li><li>Develop risk mitigation strategies to effectively manage risk in accordance with organizational risk appetite</li><li>Develop specific cybersecurity countermeasures and risk mitigation strategies.</li><li>Ensure that decisions relating to cybersecurity are based on sound risk management principles</li><li>Perform risk analysis whenever an application or system undergoes a major change</li><li>Provide input to the risk management framework and related documentation.</li><li>Ensure cybersecurity risks are identified and managed appropriately through the organization's risk governance process.</li><li>Conduct an initial risk assessment of stakeholder assets and update the risk assessment on an ongoing basis.</li><li>Use continuous monitoring tools to assess risk on an ongoing basis.</li><li>Analyze organization's cybersecurity defense policies and configurations to evaluate compliance with regulations and organizational directives.</li><li>Evaluate cybersecurity aspects of contracts to ensure compliance with financial, contractual, legal and regulatory requirements.</li><li>Recognize patterns of non-compliance with cybersecurity policies and related documentation to identify ways to improve the documentation.</li><li>Periodically review cybersecurity strategy, policies and related documents to maintain compliance with applicable legislation and regulation.</li><li>Work with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues.</li><li>Develop specifications to ensure that risk, compliance and assurance efforts conform with cybersecurity requirements.</li><li>Monitor and evaluate a system's compliance with cybersecurity, resilience and dependability requirements.</li><li>Provide support to compliance activities as necessary.</li><li>Maintain knowledge of applicable legislation, regulation and accreditation standards and regularly review these to ensure continued organizational compliance</li></ul>
Requirements
1. Minimum Qualification and certifications<ul>
<li>
Education: Bachelor&rsquo;s in Computer Science, Information Security or related field.</li>
<li>Experience: 4+ years of experience in GRC.</li>
<li>Language: Very Good English and Arabic.</li>
</ul>
2. Skills, Knowledge and Abilities:
<ul><li>Knowledge of network components, their operation and appropriate network security controls and methods.</li>
<li>Knowledge and understanding of risk assessment, mitigation and management methods</li>
<li>Knowledge of relevant cybersecurity aspects of legislative and regulatory requirements, relating to ethics and privacy.</li>
<li>Knowledge of the principles of cybersecurity and privacy.</li>
<li>Knowledge of cybersecurity related threats and vulnerabilities.</li>
<li>Knowledge of the likely operational impact on an organization of cybersecurity breaches.</li>
<li>Knowledge of system and application security threats and vulnerabilities.</li>
<li>Knowledge of the national cybersecurity regulations and requirements relevant to the organization.</li>
<li>Knowledge of the organization's core business processes and how cybersecurity affects them.</li>
<li>Knowledge of relevant laws, legal authorities, restrictions and regulations that govern and are applicable to cybersecurity activities.</li>
<li>Knowledge of the full spectrum of defensive and offensive cybersecurity capabilities.</li>
<li>Knowledge of emerging technologies and their potential for exploitation.</li>
<li>Knowledge of cybersecurity authentication, authorization and access control methods.</li>
<li>Knowledge of vulnerabilities in applications and their likely impact.</li>
<li>Knowledge of the organization's risk management processes and procedures.</li>
<li>Knowledge of import and export control regulations relevant to cybersecurity risk management activities, knowledge and technologies.</li>
<li>Knowledge of supply chain risk management standards, processes and practices from a cybersecurity perspective.</li>
<li>Knowledge of data classification standards and methodologies as they relate to the management of cybersecurity risk.</li>
<li>Knowledge of organizational objectives, leadership priorities and risk management methods.</li>
<li>Knowledge of what constitutes a threat to network security.</li>
<li>Skill in performing cybersecurity related impact and risk assessments.</li>
<li>Skill in effectively communicating with all levels of staff.</li>
<li>Skill in using risk scoring to inform performance-based and cost-effective approaches to help an organization manage its cybersecurity risk.</li>
<li>Skill in planning and carrying out administrative activities relating to cybersecurity.</li>
<li>Skill in preparing plans and related documentation.</li>
<li>Ability to develop policy and related documentation to support business and maintain compliance with legislative, regulatory and contractual obligations.</li>
<li>Ability to develop, update and maintain cybersecurity related documentation.</li>
<li>Ability to select appropriate mitigation techniques within the organization's goals and policies.</li>
<li>Ability to communicate technical and planning information at the same level as a stakeholder's understanding.</li>
<li>Ability to work with Leadership to provide oversight for all cybersecurity risk management related activities.</li>
<li>Ability to implement supply chain risk management standards.</li>
<li>Ability to develop clear, concise and effective instructional materials.</li></ul></div>

GRC Specialist (KSA National)

Latham & Watkins

<div>
 
 About Latham &amp; Watkins
 
 
 
 Latham &amp; Watkins is a global law firm consistently ranked among the top firms in the world. The success of our firm is largely determined by our commitment to hire and develop the very best and brightest, creating a team that provides our clients with the highest quality of work and service. We are driven by our core values: respect, innovation, and collaboration.
 
 
 
 About The Role
 
 
 
 The Information Governance Senior Analyst is an integral part of Latham&rsquo;s Information Governance (IG) team. Reporting into the Director of Administration - Middle East &amp; North Africa, this role will be responsible for coordinating all primary functions of the IG Operations team, including file management (both physical and electronic), file intake, file releases, destruction requests, data access requests, case room management, and records retention , while i dentifying opportunities to enhance the Information Governance program by utilising a thorough understanding of information management, security, and privacy principles. This role will be located in Latham&rsquo;s Regional Headquarters in Riyadh.
 
 
 
 Responsibilities &amp; Qualifications
 
 
 
 Other key responsibilities include:
 
 
 <ul>
 <li>
 Identifying opportunities to enhance the IG programme by utilising a thorough understanding of information management, security, and privacy principles
 </li>
 <li>
 Consulting firm personnel on the appropriate locations where data should be stored, acting as a resource regarding various information governance questions for staff, lawyers, and other users, and providing instruction and training as needed
 </li>
 <li>
 Coordinating and performing all aspects of information governance processes, including file intakes, releases, destructions, and data access procedures for the office, ensuring compliance with firm policies and completion of the relevant process
 </li>
 <li>
 Coordinating the execution of and ensuring compliance with records retention procedures, ascertaining which files are subject to retention, and maintaining meticulous records regarding file disposition
 </li>
 <li>
 Organising boxes, following off-site storage procedures, and preparing files both physically and within the records management system and other databases
 
 
 
 </li>
 </ul>
 We&rsquo;d love to hear from you if you:
 
 
 <ul>
 <li>
 Possess extensive knowledge of information governance, data security and privacy principles, best practices, and procedures
 </li>
 <li>
 Display excellent communication skills
 </li>
 <li>
 Demonstrate thorough knowledge of the physical and electronic resources of the department and firm, and the ability to articulate the role of effective space management in the overall administration of the office
 
 
 
 </li>
 </ul>
 And have:
 
 
 <ul>
 <li>
 Relevant Information Governance or Records experience, preferably in a law firm Information Governance or Records Department
 </li>
 <li>
 Experience in other law firm positions having significant document organisational responsibilities may be considered in lieu of directly related Information Governance or Records experience
 
 
 
 </li>
 </ul>
 
 Benefits &amp; Additional Information
 
 
 
 Successful candidates will not only be provided with an outstanding career opportunity and welcoming environment, but will also be provided with a generous total compensation package with bonuses awarded in recognition of both individual and firm performance. Eligible employees can participate in Latham&rsquo;s comprehensive benefit program which includes:
 
 
 <ul>
 <li>
 Health insurance as well as group income protection and life assurance
 </li>
 <li>
 A pension plan
 </li>
 <li>
 Wellness programs
 </li>
 <li>
 Employee discounts
 </li>
 <li>
 And more!
 
 
 
 </li>
 </ul>
 Additionally, we have a range of programming including Global Affinity Groups, which are open to all. These groups provide a firmwide platform to share experiences and advice as well as an opportunity to participate in a supportive network with common interests to help make life at the firm even better.
 
 
 Latham &amp; Watkins is an equal opportunity employer. The Firm prohibits discrimination against any employee or applicant for employment on the basis of race (including, but not limited to, hair texture and protective hairstyles), colour, religion, sex, age, national origin, veteran status (including veterans of the Vietnam era), marital status, or any other characteristic or condition protected by applicable statute. #MidSenior
</div>

Records Management Analyst

Datamatics Global Services Ltd

<div><h1 class="jobSectionHeader">Job Description &ndash; CRM Business Analyst</h1> 
Saudi Nationals Only 
Location: Riyadh - KSA 
Job Type: Full-Time 
Experience: 6+ Years of Experience.<h2 class="jobSectionHeader"> 
Role Title: CRM Business Analyst</h2><h2 class="jobSectionHeader">
Role Purpose:</h2>
The CRM Business Analyst will serve as the key liaison between Business Units and IT, responsible for analyzing, articulating, and documenting all CRM-related business requirements. The role involves understanding current processes, proposing improvements, and ensuring optimal utilization of CRM systems in collaboration with IT, Enterprise Architecture (EA), and relevant stakeholders.
The CRM BA will support digital transformation initiatives by converting business needs into clear, structured requirements such as Business Requirement Documents (BRD), User Stories, Process Flows, and Wireframes.<h2 class="jobSectionHeader"> 
Key Responsibilities:</h2><h3 class="jobSectionHeader">
Core Responsibilities:</h3><ul><li>
Analyze submitted business requirements and develop an initial understanding of needs, identifying clarifications and preparing queries.</li><li>
Coordinate requirement-gathering sessions with IT Project Managers and business stakeholders to understand current and proposed CRM processes.</li><li>
Conduct detailed elicitation sessions with relevant stakeholders to capture all necessary information for CRM enhancements or change requests.</li><li>
Evaluate existing business processes, identify gaps, and propose improved &ldquo;To-Be&rdquo; processes, including workflows and wireframes where applicable.</li><li>
Prepare detailed documentation such as BRD, DOU, and User Stories with acceptance criteria, ensuring internal IT review before circulating to business units.</li><li>
Update requirement documents based on feedback from IT and Business, ensuring complete alignment before final approval.</li><li>
Support the IT Project Manager during System Integration Testing (SIT) and System Acceptance Testing (SAT), and assist business teams during UAT.</li><li>
Perform impact assessments for proposed changes and prepare assessment reports when required.</li><li>
Assist team members on cross-functional projects as directed by the Line Manager.</li><li>
Maintain and update personal task lists on a daily basis, ensuring visibility and progress tracking.</li></ul><h2 class="jobSectionHeader"> 
Qualifications &amp; Experience:</h2><ul><li>
Education: Bachelor&rsquo;s degree in Computer Science, Information Technology, or a related field.</li><li>
Experience: 7&ndash;8 years of proven experience as a Business Analyst, preferably in CRM or IT-focused roles.</li><li>
Certifications (Preferred):<ul><li>
IIBA-CCBA</li><li>
IIBA-CBAP</li><li>
PMI-PBA</li></ul></li><li>
Skills:<ul><li>
Strong analytical and problem-solving skills</li><li>
Excellent documentation and requirement-gathering skills</li><li>
Ability to communicate effectively in English (written &amp; spoken)</li></ul></li></ul><h2 class="jobSectionHeader"> 
Preferred Background:</h2><ul><li>
Prior experience working in IT or CRM-driven environments</li><li>
Strong understanding of CRM systems, business workflows, and process re-engineering</li><li>
Ability to work collaboratively across technical and business teams</li></ul>
hYYgkd180k</div>

Senior Business Analyst - CRM

Explore 1281+ Information security analyst in Riyadh this December. Find roles across top companies and apply now to boost your career.