Cybersecurity Risk Specialist

NTT; Riyadh; On-site; SAR 150,000 - 200,000; Full time

Job summary

A global technology services provider is seeking a Cybersecurity Risk Analyst to identify and address risks, enhance compliance, and advise management. Candidates should have at least 4 years of experience, a relevant bachelor's degree, and strong communication skills. The role requires on-site working in Riyadh, Saudi Arabia, and offers the possibility to impact society positively through technology.

Qualifications

• Minimum 4 years of experience as a Risk Analyst, preferably in a global organization.
• Knowledge of securing cloud environments and application vulnerabilities.
• Ability to communicate risks in clear terms to stakeholders.

Responsibilities

• Identify and assess cybersecurity risks and vulnerabilities.
• Develop strategies to address cybersecurity risks and compliance needs.
• Advise senior management on cybersecurity risks.

Skills

Risk Assessment

Threat and Vulnerability Management

Excellent communication skills

Network Security Architecture

Education

Bachelor’s degree in Business, Information Security, or related field

Tools

CISM Certification

CISSP Certification

Risk Management Frameworks

Job description

JOB DESCRIPTION

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Key responsibilities

• Identify and assess cybersecurity risks and vulnerabilities.
• Conduct threat modelling and analyse potential impacts.
• Develop strategies to address cybersecurity risks.
• Implement cybersecurity frameworks (e.g., NCA, NIST, ISO 27001) and ensure compliance with regulations, national and international standards.
• Advise on remediation steps to mitigate security gaps.
• Assist with business continuity and disaster recovery plans.
• Set up continuous monitoring systems for security threats.
• Report on security metrics and process improvements.
• Advise senior management on cybersecurity risks, and collaborate with IT, legal, and other departments.
• Evaluate and recommend cybersecurity tools and technologies.
• Assess the security posture of third‑party vendors.
• Advise on secure vendor relationships and data sharing protocols.

Technical Competencies

• Network Security Architecture: Knowledge of designing and configuring firewalls.
• Cloud & Application Security: Knowledge of securing cloud environments, application vulnerabilities, and best practices (e.g., OWASP Top 10).
• Understanding how to adapt emerging technologies and threats.
• Knowledge of relevant regulatory frameworks.
• NCA (ECC, DCC, CSCC)
• NDMO (National Data Management Office)
• GDPR (General Data Protection Regulation)
• HIPAA (Health Insurance Portability and Accountability Act)
• NIST (National Institute of Standards and Technology)
• ISO/IEC 27001 & 27002

Cyber Security Knowledge

• Risk Assessment: Ability to identify, evaluate, and prioritize cybersecurity risks to an organization.
• Risk Mitigation: Knowledge of strategies to reduce, transfer, or eliminate identified risks.
• Threat and Vulnerability Management: Understanding how to manage vulnerabilities through patching, configuration management, and vulnerability scanning.
• Risk Reporting: Ability to communicate risks to stakeholders in clear terms.
• Excellent communication and documentation skills to effectively communicate complex cybersecurity and compliance concepts to technical and non‑technical stakeholders and coordinate with executive leadership to communicate security posture and make strategic recommendations.

Academic qualifications and certifications

• Bachelor’s degree or equivalent in Business, Information Security, Risk Management or related field.
• Relevant certifications such as CISM, CRISC, CISSP, CIPP preferred.

Required experience

• Min 4 years of experience as a Risk Analyst, preferably in a global organization with diverse operations.

Workplace type

On‑site Working

About NTT DATA

NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long‑term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start‑up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.