Cybersecurity GRC Analyst

2 days ago

Riyadh, Ar Riyāḑ, Saudi Arabia American Express Saudi Arabia Full time

Company Description

American Express Saudi Arabia, established in 1999, is a leading financial company in the Kingdom, renowned for delivering excellence and innovative payment solutions. Our mission is to empower individuals and businesses to progress through advanced payment solutions like Credit Cards, Charge Cards, and other services tailored to fit diverse needs. We lead the Card Business Payment sector, helping customers manage expenses and cash flow effectively. Join us to be part of a team that provides world-class experiences and business success.

About the Role:

We are seeking a motivated and detail-oriented Cybersecurity GRC Specialist to join our growing cybersecurity team. The ideal candidate will play a key role in developing and delivering cybersecurity awareness and training programs, supporting internal audits, assisting with third-party risk management and contributing to risk management initiatives. This role offers the opportunity to work across various cybersecurity governance, risk and compliance areas while developing your career in the dynamic field of cybersecurity.

Key Responsibilities include

:

  • Assist in identifying, assessing, and reporting cybersecurity risks across the organization.
  • Support the development and maintenance of risk registers, tracking identified risks, and assisting in risk mitigation strategies.
  • Support the planning and execution of internal cybersecurity audits to assess adherence to cybersecurity and regulatory requirements.
  • Assist in preparing audit documentation, audit reports, and follow-up on audit findings with relevant departments.
  • Conduct periodic reviews of third-party cybersecurity posture and assist in monitoring vendor performance in relation to compliance and risk management requirements.
  • Collaborate with the procurement and legal teams to ensure third-party cybersecurity requirements are adequately addressed in vendor contracts and service level agreements (SLAs).
  • Design, develop and implement cybersecurity awareness and training programs in alignment with international standards and regulations (e.g., ISO 27001, NCA, SAMA, PCI DSS).
  • Deliver periodic cybersecurity awareness sessions (online and/or in person). Monitor employee engagement and completion.
  • Track and report on training & phishing metrics to measure effectiveness and to identify risky areas for improvement.
  • Plan and manage phishing simulations and analyze results.
  • Governance of User Violations and Disciplinary Measures
  • Maintain consistent communication about threats, trends, and best practices.
  • Perform other duties as assigned by the GRC Manager.

Necessary Documents to Submit

:

  • Resume/CV
  • Bachelor's degree in computer science, information security or a related field.
  • Relevant certifications (e.g., CompTIA Security+, ISO 27001 Foundations).

Why Join AMEX

:

  • Working at American Express Saudi Arabia offers a unique opportunity to be part of a global brand with strong local presence. Employees benefit from competitive salaries, continuous training, and professional growth. The company fosters an inclusive and innovative work culture, led by strong leadership and a clear vision. With a focus on digital transformation and social responsibility, AMEX is a place where talent is valued and empowered.

  • Cybersecurity GRC Consultant

    1 week ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Hays Full time

    Responsible for delivering professional GRC services, developing and implementing cybersecurity strategies, and ensuring compliance with industry standards and frameworks. This role requires strong technical knowledge, excellent communication skills, and the ability to manage client relationships effectively.Key Responsibilities:Deliver GRC professional...

  • Cybersecurity GRC Specialist

    1 week ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Lendo | ليندو Full time 120,000 - 240,000 per year

    About Us:At Lendo, we are a fast-growing FinTech company on a mission to revolutionize the financial landscape in Saudi Arabia. With our innovative digital lending platform, we empower businesses by providing fast, secure, and transparent access to finance. As we continue to expand, we are seeking a detail-oriented and knowledgeable GRC Specialist to enhance...

  • Senior Cybersecurity GRC Specialist

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Mozn Full time 120,000 - 240,000 per year

    About the roleWe are seeking a highly skilled and motivated Cybersecurity GRC Specialist to join our Governance, Risk, and Compliance (GRC) team. This role is pivotal in ensuring our cybersecurity practices align with both Saudi regulatory frameworks and international standards. The ideal candidate will possess hands-on experience in conducting risk...

  • Cybersecurity Intern

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia help AG Full time 30,000 - 60,000 per year

    Help AG is seeking a motivated and talented individual to join our team as a Cybersecurity Intern for 6 months. This internship provides a unique opportunity to gain hands-on experience in the dynamic field of cybersecurity and contribute to real-world projects. As a Cybersecurity Intern, you will work closely with our experienced team of cybersecurity...

  • GRC Consultant

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Security Matterz Full time 60,000 - 120,000 per year

    About Security MatterzSecurity Matterz is a Saudi company Riyadh-based cybersecurity and Managed Security Services provider, helping organizations across government, financial, and private sectors to strengthen their security posture and comply with local and international regulations.We are looking for GRC Consultantsto support and lead cybersecurity...

  • Cybersecurity Intern

    2 weeks ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Help AG Full time 30,000 - 60,000 per year

    Job description Help AG is seeking a motivated and talented individual to join our team as a Cybersecurity Intern for 6 months.  This internship provides a unique opportunity to gain hands-on experience in the dynamic field of cybersecurity and contribute to real-world projects. As a Cybersecurity Intern, you will work closely with our experienced team of...

  • Cybersecurity GRC Manager

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia HALA Full time $80,000 - $180,000 per year

    Who Are WeHALA is a leading fintech player in the MENAP region that aims to redefine financial services and build the future bank of SMEs. HALA aims at empowering SMEs to start, run, and grow their businesses by providing them with cutting-edge financial and technological tools.HALA currently holds multiple entities in UAE, Saudi Arabia and Egypt (including...

  • SOC Level 1 Analyst

    1 week ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Green Circle for Cybersecurity Full time 120,000 - 180,000 per year

    SOC Level 1 AnalystRole OverviewThe SOC Level 1 Analyst is responsible for 24/7 monitoring, detection, and initial response to security incidents. Working as part of the Security Operations Center (SOC) team, the analyst helps protect the organization from cyber threats and ensures the confidentiality, integrity, and availability of information systems.Key...

  • GRC Lead

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia NAMI | a 3D Printing Company Full time $120,000 - $180,000 per year

    Role PurposeThe GRC Lead is responsible for establishing, managing, and continuously improving the company's Governance, Risk, and Compliance framework. The role ensures full adherence to KSA, U.S., and international regulations related to import, export, manufacturing, technology transfer, data handling, and defense-sector compliance.This position leads...

  • GRC Manager

    1 week ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Aventus Full time

    GRC Manager – Short-Term Engagement | Riyadh, Saudi ArabiaWe are seeking an experiencedGRC (Governance, Risk & Compliance) Managerfor a2-month consulting engagementwith a leading government organization in Riyadh.The ideal candidate will bring deep expertise inenterprise risk management, cybersecurity governance, and compliance frameworks, ensuring...