senior architect

business analyst

business analyst - banking domain Jobs in Riyadh

business analyst - banking domain

it senior officer - ksa

it support specialist

senior cyber security analyst

Innovative Solutions SA

<div>
 
 Company Description
 
 
 
 Innovative Solutions (IS) is a leading pure-player Cyber security company in the GCC established in 2003, headquartered in Riyadh with presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our Cybersecurity Solutions and Services encompass Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.
 
 
 Innovative Solutions is committed to its mission to "Bring Trust to Cyberspace" to ensure "
 
 Your Business, Secured
 
 ."
 
 
 
 Role Description
 
 
 
 As a PAM Consultant specializing in CyberArk at Innovative Solutions, you will be responsible for implementing and managing privileged access management solutions using the CyberArk platform. You will collaborate with clients to understand their security needs and architect solutions that secure and manage privileged accounts, credentials, and sessions within their environment.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Deploy and configure CyberArk PAS, EPM
 </li>
 <li>
 Define and enforce PAM policies
 </li>
 <li>
 Integrate CyberArk with apps, servers, cloud
 </li>
 <li>
 Conduct access reviews &amp; compliance reporting
 </li>
 <li>
 Advise on PAM best practices &amp; regulatory alignment
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Bachelor's degree in Information Technology, Cybersecurity, or a related field
 </li>
 <li>
 4 to 7 years of experience in IAM/PAM, specifically with 2-3 years in CyberArk solutions
 </li>
 <li>
 Strong PAM lifecycle and Zero Trust knowledge
 </li>
 <li>
 Certification in CyberArk Defender/Guardian, CISSP/CISM is highly desirable
 </li>
 </ul>
</div>

PAM Consultant (CyberArk)

Innovative Solutions

<div><h3 class="jobSectionHeader">Company Description</h3>
Innovative Solutions (IS) is a leading pure-player Cyber security company in the GCC established in 2003, headquartered in Riyadh with presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our Cybersecurity Solutions and Services encompass Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.
Innovative Solutions is committed to its mission to &ldquo;Bring Trust to Cyberspace&rdquo; to ensure &ldquo;Your Business, Secured.&rdquo;<h3 class="jobSectionHeader">
Role Description</h3>
As a PAM Consultant specializing in CyberArk at Innovative Solutions, you will be responsible for implementing and managing privileged access management solutions using the CyberArk platform. You will collaborate with clients to understand their security needs and architect solutions that secure and manage privileged accounts, credentials, and sessions within their environment.<h3 class="jobSectionHeader">
Responsibilities</h3><ul>
<li>Deploy and configure CyberArk PAS, EPM</li>
<li>Define and enforce PAM policies</li>
<li>Integrate CyberArk with apps, servers, cloud</li>
<li>Conduct access reviews &amp; compliance reporting</li>
<li>Advise on PAM best practices &amp; regulatory alignment</li>
</ul>Requirements<ul>
<li>Bachelor's degree in Information Technology, Cybersecurity, or a related field</li>
<li>4 to 7 years of experience in IAM/PAM, specifically with 2-3 years in CyberArk solutions</li>
<li>Strong PAM lifecycle and Zero Trust knowledge</li>
<li>Certification in CyberArk Defender/Guardian, CISSP/CISM is highly desirable</li></ul></div>

Mindstream

Job Advertisement &ndash; L1 SOC Analyst (Level 1) Location: Qatar Duration: 3 Years Salary: Based on merit Role Summary: The L1 SOC Analyst is the first line of defense in the Security Operations Center (SOC). This role is responsible for real-time monitoring, detection, and escalation of security incidents, ensuring timely responses to potential threats. Key Responsibilities: Monitor SIEM and other security monitoring tools for alerts and suspicious activity. Perform initial triage to assess severity and potential impact of incidents. Escalate high-priority incidents to L2 Analysts or SOC Manager. Document incidents, findings, and actions taken in tracking systems. Support in basic investigations of malware, phishing, and intrusion attempts. Follow SOC playbooks and standard operating procedures. Requirements: Basic knowledge of cybersecurity concepts, threats, and attack vectors. Familiarity with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel). Understanding of TCP/IP, networking fundamentals, and operating systems. Strong analytical and communication skills. Willingness to work in 24x7 shift rotations. Experience in SOC setup, administration, and management is an advantage. Hands-on with Windows (Event Viewer, PowerShell) &amp; Linux CLI (logs, services). Ability to analyze logs from firewalls, proxies, and endpoints. Effective communication and documentation skills. Certifications (at least two required): CEH, GIAC, CySA+, ECIH, Microsoft Sentinel SIEM, Splunk certification, or equivalent.Job Type: Full-timeApplication Question(s):<ul><li>Do you have prior experience working in a Security Operations Center (SOC)?</li><li>How many years of professional experience do you have in cybersecurity or SOC monitoring roles?</li><li>Do you hold at least two relevant cybersecurity certifications (e.g., CEH, GIAC, CySA+, ECIH, Microsoft Sentinel SIEM, Splunk, etc.)? please mention.</li><li>Are you comfortable working in 24x7 shift rotations, including nights, weekends, and holidays?</li><li>How would you rate your knowledge of networking fundamentals (TCP/IP, DNS, HTTP, ports, subnets, firewall logic)?</li><li>What is your current and expected monthly salary (QAR)? Notice period?</li></ul>

L1 SOC Analyst (Level-1)

Qiddiya Investment Company

<div>Qiddiya Investment Company is seeking a proactive and detail-oriented Assistant Manager - Cybersecurity Threat Management to join our cybersecurity team. In this role, you will be responsible for identifying, analyzing, and mitigating cybersecurity threats to protect our critical digital assets and infrastructure.
Your expertise in threat intelligence and incident response will be essential for developing effective strategies to manage and respond to emerging threats in a timely manner. You will work closely with various teams to ensure a coordinated approach to cybersecurity threat management within the organization.<h3 class="jobSectionHeader">
Responsibilities</h3><ul>
<li>Monitor and analyze cybersecurity threats, vulnerabilities, and emerging trends to provide actionable insights and recommendations.</li>
<li>Conduct thorough investigations of security incidents and breaches, coordinating response efforts and documenting findings.</li>
<li>Collaborate with cross-functional teams to develop and implement threat mitigation strategies and incident response plans.</li>
<li>Maintain and enhance threat intelligence capabilities by collecting, analyzing, and disseminating relevant threat information.</li>
<li>Develop and deliver training and awareness programs focused on cybersecurity threats and best practices for threat management.</li>
<li>Prepare reports and presentations on emerging threats and incidents for senior management and stakeholders.</li>
<li>Stay updated on the latest cybersecurity threats, tools, and techniques to continuously improve threat management processes.</li>
</ul>Requirements<ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, or a related field.</li>
<li>4-6 years of experience in cybersecurity threat management, incident response, or related roles.</li>
<li>Strong understanding of threat intelligence frameworks and incident response methodologies.</li>
<li>Experience with security monitoring tools and threat detection technologies.</li>
<li>Excellent analytical and investigative skills.</li>
<li>Strong communication and collaboration abilities, capable of working with diverse teams.</li>
<li>Relevant certifications (e.g., Certified Information Systems Security Professional (CISSP), Certified Incident Handler (GCIH)) are desirable.</li>
</ul>Benefits
Comprehensive benefits package</div>

Assistant Manager - Cybersecurity Threat management

MBC GROUP

<div>
 
 
 About us
 
 
 
 
 
 
 With three decades of creating iconic brands and producing groundbreaking award-winning content, MBC GROUP is the leading media organization in the MENA region and the number one Arabic media company in the world. MBC GROUP employs 3000+ staff from over 70 nationalities with a global audience of over 150 million viewers. It reaches audiences through multi-platform experiences &ndash; premium broadcasting, digital streaming, gaming, radio, apps, events, and more.
 
 
 
 
 
 We are seeking a dedicated and detail-oriented Security GRC (Governance, Risk, and Compliance) Analyst to join our dynamic team. In this crucial role, you will help establish a new Cyber GRC function, ensuring our organization not only meets regulatory requirements but also effectively manages risks and implements robust governance frameworks. Your deep understanding of risk management, compliance processes, and governance principles will be vital in shaping the future success of our technology services and customer products.
 
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 
 
 
 
 
 Security Risk Management:
 
 
 <ul>
 <li>
 Adhering to regional policy and industry standards facilitate the end-to-end security risk management process, ensuring that risks are proactively identified, assessed, recorded, and mitigated.
 </li>
 <li>
 Maintain a risk register and evaluate security risks based on their potential enterprise-wide &amp; product impact, likelihood, and mitigation strategies.
 </li>
 <li>
 Serve as a trusted security advisor, collaborating with cross-functional teams including IT, Internal Audit, Development/Engineering, and other business operations teams to foster a culture of risk awareness.
 </li>
 <li>
 Ensure that all security risks align with regulatory requirements such as ISO 27001, NIST, GDPR, and other international security frameworks.
 </li>
 <li>
 Provide oversight and work closely with risk owners to manage the development and implementation of treatment plans that address identified risks
 </li>
 </ul>
 
 
 
 
 
 GRC Tool Management:
 
 
 <ul>
 <li>
 Take ownership of, manage, and continuously enhance the GRC platform to deliver structured and scalable GRC reporting.
 </li>
 <li>
 Develop new features with a GRC product mindset, focusing on integrations and custom reporting in the management tool.
 </li>
 <li>
 Capable of planning and prioritizing tasks to develop a timely and coordinated delivery plan for projects.
 </li>
 <li>
 Setup and manage automated workflows that integrate compliance checks on security controls across cloud and on-premise environments
 </li>
 <li>
 Experienced in writing compliance as code with third-party tools
 </li>
 <li>
 Ability to utilize AI services for analyzing, organizing, automating, and managing compliance frameworks and complex regulatory requirements.
 </li>
 </ul>
 
 
 
 
 
 Audit &amp; Compliance Requirements:
 
 
 <ul>
 <li>
 Carry out a continuous assessment to ensure compliance with the necessary certifications and standards for the organization.
 </li>
 <li>
 Collaborate closely with the Cyber teams to ensure compliance with audit requirements and successful delivery for ISO 27001.
 </li>
 <li>
 Assist in addressing internal and external audit findings from reporting through to remediation and closure.
 </li>
 </ul>
 
 
 
 
 
 Governance:
 
 
 <ul>
 <li>
 Assist in documenting, managing and maintaining a central repository of cyber &amp; data policies to guide and inform teams within the organization.
 </li>
 <li>
 Help prepare management meeting reports by tracking updates on risk triage activities, changes to the critical risk register, and general strategies for risk mitigation.
 </li>
 <li>
 Assist in preparing management meeting reports by providing comprehensive tracking and updates on certification compliance milestones.
 </li>
 </ul>
 
 
 
 
 
 Security Team &amp; Data Governance Collaboration:
 
 
 <ul>
 <li>
 Establish a close collaborative working relationship with the Cyber Defense team.
 </li>
 <li>
 Utilize the cyber defense team's technical expertise to reduce risk and enhance compliance with security best practice.
 </li>
 <li>
 Establish a close collaborative working relationship with the Data Governance team.
 </li>
 <li>
 Utilize the Data Governance team's technical expertise to reduce risk and enhance compliance with data regulations.
 </li>
 </ul>
 
 
 
 
 
 
 Technical Expertise
 
 
 
 
 
 
 
 
 Cloud Platforms:
 
 
 <ul>
 <li>
 Experience with AWS, GCP, and Azure, including cloud security, architecture, and management.
 </li>
 </ul>
 
 
 Security Tools:
 
 
 <ul>
 <li>
 Awareness of security tools and technologies such as SIEM (e.g., Splunk, ELK Stack), vulnerability management (e.g., Wiz, Tenable, Rapid7), WAF, DDoS protection (e.g., AWS Shield, Cloudflare), and endpoint security.
 </li>
 </ul>
 
 
 GRC Management:
 
 
 <ul>
 <li>
 Proficient in using centralized GRC management tooling.
 </li>
 </ul>
 
 
 Analytics and Reporting:
 
 
 <ul>
 <li>
 Experience in analyzing technical debt and historical incidents and generating risk insights.
 </li>
 <li>
 Ability to identify system performance patterns using observability tools.
 </li>
 </ul>
 
 
 Compliance and Governance:
 
 
 <ul>
 <li>
 Familiarity with compliance standards and frameworks such as ISO 27001, NIST, GDPR, and CCPA.
 </li>
 </ul>
 
 
 
 
 
 
 Qualifications
 
 
 
 
 
 
 
 
 Education
 
 :
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field.
 </li>
 </ul>
 
 
 Experience
 
 :
 
 <ul>
 <li>
 Minimum of 3 years of experience in GRC, risk management, compliance, or a related role.
 </li>
 <li>
 Experience in the digital entertainment or VOD industry is a plus.
 </li>
 <li>
 Experience with Saudi Government's National Cybersecurity Authority (NCA) is a plus.
 </li>
 </ul>
 
 
 Skills:
 
 
 <ul>
 <li>
 Strong understanding of regulatory requirements and industry standards.
 </li>
 <li>
 Excellent analytical and problem-solving skills.
 </li>
 <li>
 Effective communication and interpersonal skills.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Professional certifications such as CRISC, CISA, or CISSP are a plus.
 </li>
 <li>
 Ability to work in a fast paced, dynamic environment.
 </li>
 </ul>
 
 
 
 
 REF: PL
 
</div>

Cyber GRC Analyst

Specialized Technical Services – STS

<div>Our Culture:
At Hulool Zaintech for Information Technology we are proud of our culture and how it drives everything we do. We are looking for individuals who share our values and want to be part of a unique and engaging culture that revolves around collaboration and innovation. If you are looking for a role where you can drive engagement and excellence across teams through commitment and collaboration, and are someone who is customer-centric and appreciates an organization with uncompromised integrity that focuses on employee engagement then read on to learn more about how you can become part of the Hulool Zaintech family.
Our Code of Conduct
At Hulool Zaintech for Information Technology we strictly adhere to our code of conduct, which is there to serve as a moral compass, offering a framework for responsible behaviours and enabling ethical choices that cultivate positive relationships and a better future. It also outlines policies, standards, and procedures for our global operations, promoting integrity and ethical excellence across the countries we engage with.
Every year, all employees are required to review, comprehend, confirm, and adhere to the code of conduct. Additionally, all newly hired employees are subject to the same as part of their onboarding process.
The SOC L1 team plays a critical role in maintaining the security posture of an organization and protecting it from cyber threats. 
Duties and Responsibilities:<ul>
<li>Performing initial analysis on true positive alerts to determine root cause and impact.</li>
<li>Undertake first stages of false positive and false negative analysis.</li>
<li>Generate weekly reports from SIEM platform and send it to L2 SOC analysts for review</li>
<li>Track and update incidents and requests based on client&rsquo;s updates and analysis results</li>
<li>Escalate validated and confirmed incidents as per escalation procedures.</li>
<li>Collection of necessary logs that could help in the incident containment and security investigation</li>
<li>Acknowledge, analyze and validate incidents received through other reporting mechanisms such as email, phone calls, management directions, etc.</li>
<li>Acknowledge, analyze and validate incidents triggered from correlated events through SIEM solution.</li>
<li>Other duties related to the position</li>
</ul>Requirements<ul>
<li>Bachelor's degree in Cyber Security, Computer Science, or any IT-related field</li>
<li>0-2 years of experience, fresh graduates are welcome to apply</li>
</ul>Minimum two of the below Certificates:<ul>
<li>Security+</li>
<li>CEH
</li><li>eLearnSecurity Certified Incident Responder
</li><li>EC-Council Certified Security Analyst</li></ul></div>

Security Analyst (Saudi National only)

ترشيد | TARSHID

<div>
 
 
 
 About Tarshid:
 
 
 
 
 Tarshid is the National Energy Services Company, established by the Public Investment Fund to catalyze the development of a more energy efficient Saudi Arabia. The launch of Tarshid is a result of a collaborative effort between the Ministry of Energy, Ministry of Finance and the Saudi Energy Efficiency Center. Tarshid aims to be a pioneer in the energy efficiency field and to build towards a more sustainable future. Tarshid has a mandate to develop, fund and manage impactful energy efficiency projects in government and commercial sectors that achieve significant energy savings for the Kingdom.
 
 
 
 
 
 
 
 Job Summary:
 
 
 
 
 Leads efforts to protect the Tarshid information assets by developing and enhancing cybersecurity governance, risk, and compliance frameworks. This role ensures alignment with regulatory requirements, including Saudi NCA regulations (e.g., ECC, CCC, CSCC), and global standards such as ISO 27001 and NIST. Drives risk mitigation, ensures compliance, and promotes a strong security culture across the organization
 
 
 
 
 
 
 
 Main Responsibilities:
 
 
 
 <ul>
 <li>
 Develop, implement, and maintain cybersecurity policies, procedures, standards, and controls to ensure compliance with regulatory (NCA Controls) and industry standards such as ISO 27001, and others.
 </li>
 <li>
 Manage and monitor Cybersecurity risk assessments activities to identify, risk, vulnerabilities and prioritize treatments andremediation efforts.
 </li>
 <li>
 Maintain Cybersecurity risk registry and following up with risk treatment plan and implementation.
 </li>
 <li>
 Manage and conduct compliance activities against all regulation requirements.
 </li>
 <li>
 Develop, implement, and maintain cybersecurity KPIs and reporting.
 </li>
 <li>
 Provide cybersecurity guidance and training to employees and other stakeholders.
 </li>
 <li>
 Collaborate with IT and other departments to ensure that all systems and applications are secure and compliant by enforcing the implementation of cybersecurity policies and guidelines.
 </li>
 <li>
 Stay up-to-date with emerging threats, vulnerabilities, and best practices in cybersecurity.
 </li>
 <li>
 Maintain confidentiality in all matters related to work and information.
 </li>
 </ul>
 
 
 
 
 
 
 Qualifications, Experience &amp; Skills :
 
 
 
 <ul>
 <li>
 + 5 years of experience in cybersecurity, Governance, compliance, risk management, or related field.
 </li>
 <li>
 Knowledge of cybersecurity regulations, standards, and frameworks such as NCA (ECC,CSCC etc.), ISO 27001, and others.
 </li>
 <li>
 Demonstrated understanding of cybersecurity technologies and solutions, including EDR, NDR, SIEM, GRC platforms, and vulnerability management tools.
 </li>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Excellent English written and verbal communication skills.
 </li>
 <li>
 Ability to work independently and collaboratively with others
 </li>
 </ul>
 
 
 
 Job Benefits:
 
 
 
 <ul>
 <li>
 Bonus
 </li>
 <li>
 Vacation Days
 </li>
 <li>
 VIP Medical Insurance
 </li>
 <li>
 School Assistance
 </li>
 <li>
 Wala Plus
 </li>
 <li>
 Annual Air Ticket
 </li>
 <li>
 Mobile Allowance
 </li>
 <li>
 Wellness Allowance
 </li>
 </ul>
 
 
</div>

Cybersecurity GRC Associate Manager

Explore 841+ Senior cyber security analyst in Riyadh this September. Find roles across top companies and apply now to boost your career.

841 senior cyber security analyst jobs IN Riyadh

PAM Consultant (CyberArk)

PAM Consultant (CyberArk)

L1 SOC Analyst (Level-1)

Assistant Manager - Cybersecurity Threat management

Cyber GRC Analyst

Security Analyst (Saudi National only)

Cybersecurity GRC Associate Manager