Cybersecurity Compliance Analyst

3 weeks ago

Riyadh, Ar Riyāḑ, Saudi Arabia TIS Full time

Position Overview

The Cybersecurity Compliance Analyst will work on Gap Analysis, evaluating and aligning the organization's information security practices with the Saudi Central Bank (SAMA) Cyber Security Framework. This role involves assessing current security controls, identifying gaps, recommending risk mitigation strategies, and ensuring ongoing compliance with SAMA's regulatory requirements. Candidates with knowledge of the National Cybersecurity Authority (NCA) regulations in Saudi Arabia will be at an advantage.

Key Responsibilities

  1. Conduct Comprehensive Gap Assessments
    • Perform detailed reviews of existing security policies, procedures, and technical controls.
    • Map current practices to the SAMA Cyber Security Framework and NCA regulations, documenting any non-conformities or control gaps.
  2. Develop Risk Mitigation Strategies
    • Collaborate with cross-functional teams (IT, Legal, Compliance, Operations) to prioritize discovered gaps.
    • Propose remediation plans with clear timelines and action items to address deficiencies.
  3. Maintain Regulatory Compliance
    • Stay up to date on changes and updates in the SAMA Cyber Security Framework and NCA regulations.
    • Review and update internal policies and standards to ensure continuous alignment with regulatory requirements.
  4. Reporting & Stakeholder Communication
    • Prepare compliance reports and presentations for executive leadership and relevant committees.
    • Communicate findings and recommendations clearly to both technical and non-technical stakeholders.
  5. Audit Readiness & Support
    • Coordinate with internal and external audit teams to validate remedial actions and ensure readiness for formal SAMA reviews.
    • Provide evidence of compliance, track audit findings, and follow up on corrective actions.
  6. Continuous Improvement
    • Evaluate and improve gap analysis methodologies and tools.
    • Advocate best practices for documentation, risk assessment, and compliance testing across the organization.

Requirements

Education

  • Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical knowledge).

Technical Skillset

  • Hands-on experience in IT Security, Compliance, or Risk Management—preferably in the financial sector.
  • 3 years of relevant experience GRC or CS Compliance is preferred, candidates with a strong understanding of cybersecurity gap analysis and compliance will also be considered.
  • MUST HAVE Practical Experience on SAMA Cyber Security Framework and its alignment with standards like ISO 27001 or NIST.
  • Experience in Data Privacy and Protection, with a focus on Saudi PDPL and GDPR compliance.
  • Awareness of NCA regulations and their implications for cybersecurity in the Saudi government sector.
  • Familiarity with cybersecurity governance, risk, and compliance (GRC) tools or similar frameworks.

Preferred Certification

  • Has at least one of the following certifications:
  • ISO 27001 (Lead Implementer or Lead Auditor)
  • CISSP (Certified Information Systems Security Professional)
  • CISA (Certified Information Systems Auditor)
  • GRCP (GRC Professional)
#J-18808-Ljbffr

  • Cybersecurity Compliance Specialist

    2 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia beBee Careers Full time

    Job Title: Cybersecurity Compliance SpecialistAbout the Role:We are seeking a highly skilled Cybersecurity Compliance Analyst to join our team. As a key member of our organization, you will play a critical role in ensuring the security and integrity of our systems and data.Key Responsibilities:Gap Assessment and Analysis: Conduct thorough assessments of our...

  • Cybersecurity GRC Analyst

    2 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia EXA Group Full time

    The Cybersecurity GRC Analyst will work on Gap Analysis, evaluating and aligning the organization's information security practices with the Saudi Central Bank (SAMA) Cyber Security Framework. This role involves assessing current security controls, identifying gaps, recommending risk mitigation strategies, and ensuring ongoing compliance with SAMA's...

  • Cybersecurity Compliance Specialist

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia beBee Careers Full time

    Cybersecurity Compliance RoleThe Cybersecurity Compliance Consultant is responsible for executing compliance audits, addressing non-compliance findings, and ensuring timely submission of regulatory documentation.This role focuses on operational tasks to ensure adherence to regulatory frameworks such as NCA and SAMA standards, while supporting the GRC Team...

  • Cybersecurity Analyst

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia beBee Careers Full time

    Cybersecurity Analyst - Security Incident ResponseWe are seeking a skilled cybersecurity analyst to join our team as a Security Incident Response specialist. The successful candidate will be responsible for investigating and responding to security incidents in a timely and effective manner.Main Responsibilities:Investigate and analyze security incidents to...

  • Cybersecurity Compliance Consultant

    4 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia 2P Perfect Presentation Full time

    The Cybersecurity Compliance Consultant is responsible for executing compliance audits, addressing non-compliance findings, and ensuring timely submission of regulatory documentation. The role focuses on operational tasks to ensure adherence to regulatory frameworks such as NCA and SAMA standards, while supporting the GRC Team Lead in implementing and...

  • Cybersecurity Compliance Consultant

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Perfect Presentation (2P) Full time

    1 month ago Be among the first 25 applicantsGet AI-powered advice on this job and more exclusive features.The Cybersecurity Compliance Consultant is responsible for executing compliance audits, addressing non-compliance findings, and ensuring timely submission of regulatory documentation. The role focuses on operational tasks to ensure adherence to...

  • Cybersecurity Compliance Specialist

    2 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia beBee Careers Full time

    Cybersecurity Governance and Compliance ManagerThis role involves leading the development and implementation of an information security governance, risk management, and compliance program. The individual will be responsible for ensuring that cybersecurity policies and procedures meet business objectives and regulatory requirements, including frameworks such...

  • IT Cybersecurity Analyst

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Maximus KSA | ماكسيموس السعودية Full time

    Job Summary:We are seeking a skilled Cybersecurity Specialist to join our team at Maximus KSA. The ideal candidate will have experience in monitoring network traffic for unusual activity and responding to security breaches.Main Responsibilities:Conduct regular security assessments and vulnerability testing to identify potential threats to our...

  • Cybersecurity Operations Analyst Senior Specialist

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Saudi Pro League (SPL) Full time

    Cybersecurity Operations Analyst Senior SpecialistBachelors in Computer Application(Computers)NationalityAny NationalityVacancy1 VacancyJob DescriptionRole Main Purpose:The Cybersecurity Operations Analyst will support the day-to-day operations of the organization s cybersecurity team with a strong focus on security monitoring, alert triage, and incident...

  • Compliance Auditor

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia beBee Careers Full time

    Key ResponsibilitiesConduct compliance audits to evaluate adherence to regulatory requirements such as NCA and SAMA standards.Document audit findings and prepare detailed reports for review by the GRC Team Lead.Maintain accurate records of compliance activities for audit readiness and organizational reporting.Operational ExcellenceWork with internal teams to...