Cybersecurity Risk Specialist

NTT America, Inc.; Riyadh; On-site; SAR 262,000 - 338,000; Full time

Job summary

A global technology services company is seeking a Risk Analyst to join their team in Riyadh. The role involves identifying and assessing cybersecurity risks, developing strategies, and ensuring compliance with various regulations. Ideal candidates should have a Bachelor's degree, relevant certifications, and a minimum of 4 years of experience in a similar role.

Qualifications

• 4+ years of experience as a Risk Analyst in a global context is preferred.
• Experience with cybersecurity regulations and frameworks is preferred.

Responsibilities

• Identify and assess cybersecurity risks and vulnerabilities.
• Conduct threat modelling and analyze potential impacts.
• Develop strategies to address cybersecurity risks.
• Implement cybersecurity frameworks and ensure compliance.

Skills

Network Security Architecture

Cloud & Application Security

Risk Assessment

Risk Mitigation

Threat and Vulnerability Management

Excellent communication skills

Education

Bachelor's degree in Business, Information Security, or Risk Management

Tools

CISM

CRISC

CISSP

CIPP

Job description

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Key responsibilities:

• Identify and assess cybersecurity risks and vulnerabilities.
• Conduct threat modelling and analyze potential impacts.
• Develop strategies to address cybersecurity risks.
• Implement cybersecurity frameworks (e.g., NCA, NIST, ISO 27001) and ensure compliance with regulations, national and international standards.
• Advise on remediation steps to mitigate security gaps.
• Assist with business continuity and disaster recovery plans.
• Set up continuous monitoring systems for security threats.
• Report on security metrics and process improvements.
• Advise senior management on cybersecurity risks, and collaborate with IT, legal, and other departments.
• Evaluate and recommend cybersecurity tools and technologies.
• Assess the security posture of third-party vendors.
• Advise on secure vendor relationships and data sharing protocols.

Technical Competencies

• Network Security Architecture: Knowledge of designing and configuring firewalls
• Cloud & Application Security: Knowledge of securing cloud environments, application vulnerabilities, and best practices (e.g., OWASP Top 10).
• Understanding how to adapt emerging technologies and threats

Knowledge of Relevant Regulatory Frameworks

• NCA (ECC, DCC, CSCC)
• NDMO (National Data Management Office)
• GDPR (General Data Protection Regulation)
• HIPAA (Health Insurance Portability and Accountability Act)
• NIST (National Institute of Standards and Technology)
• ISO/IEC 27001 & 27002

Cyber Security Knowledge

• Risk Assessment: Ability to identify, evaluate, and prioritize cybersecurity risks to an organization.
• Risk Mitigation: Knowledge of strategies to reduce, transfer, or eliminate identified risks.
• Threat and Vulnerability Management: Understanding how to manage vulnerabilities through patching, configuration management, and vulnerability scanning.
• Risk Reporting: Ability to communicate risks to stakeholders in clear terms.
• Excellent communication and documentation skills to effectively communicate complex cybersecurity and compliance concepts to technical and non-technical stakeholders and coordinate with executive leadership to communicate security posture and make strategic recommendations.

Academic qualifications and certifications:

• Bachelor's degree or equivalent in Business, Information Security, Risk Management or related field.
• Relevant certifications such as CISM, CRISC, CISSP, CIPP preferred.

Required experience:

• Min 4 years of experience as a Risk Analyst, preferably in a global organization with diverse operations.

Workplace type

On-site Working

About NTT DATA

NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.

Third parties fraudulently posing as NTT DATA recruiters

NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters—whether in writing or by phone—in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us ([e-mail]).