IT Risk Analyst

Tabby; Riyadh; On-site; SAR 120,000 - 160,000; Full time

Job summary

A financial technology company in Saudi Arabia is looking for an IT Risk Analyst who will assess and monitor IT and cybersecurity risks. The role requires developing mitigation strategies and ensuring compliance with regulations. Ideal candidates will have experience in risk management and a strong understanding of cybersecurity principles. This is a full-time onsite position.

Responsibilities

• Identify and evaluate IT system and process risks, including cybersecurity threats.
• Develop and implement risk management policies and security protocols.
• Track and monitor risk activities and prepare reports for stakeholders.
• Ensure compliance with regulatory standards and advise on internal controls.
• Work with IT personnel to manage security needs.
• Build understanding of cybersecurity risks throughout the organization.

Skills

Strong risk management and analysis background

Cybersecurity principles and incident response

Experience in IT audit and internal controls

Experience with Governance, Risk, and Compliance (GRC) frameworks

Proficiency in Data analysis tools (e.g., SQL, Excel)

Skilled in Python for scripting and automation

Strong analytical and problem-solving abilities

Good communication and presentation skills

Critical thinking

Ability to work collaboratively with diverse teams

Adaptability to a constantly evolving threat landscape

Job description

IT Risk Analyst will identify, assess, and monitor IT and cybersecurity risks, develop mitigation strategies, and ensure compliance with regulations.

Job Details

• Department: Risk Enterprise
• Employment Type: Full Time
• Location: KSA
• Workplace type: Onsite
• Reporting To: Faisal Hejazi

Key Responsibilities

• Risk assessment and analysis: Identify and evaluate IT system and process risks, including cybersecurity threats, vulnerabilities, and potential consequences.
• Strategy and mitigation: Develop and implement risk management policies, procedures, and security protocols, such as firewalls and data encryption.
• Monitoring and reporting: Track and monitor risk activities, investigate security incidents, and prepare reports on key metrics and findings for stakeholders.
• Compliance and governance: Ensure compliance with regulatory standards and advise on internal controls to improve the organization's risk posture.
• Collaboration: Work with other IT personnel and stakeholders to manage security needs and communicate findings, risks, and recommendations.
• Awareness: Build understanding and awareness of cybersecurity risks throughout the organization.

  Skills, Knowledge & Expertise

  • Strong risk management and analysis background
  • Cybersecurity principles and incident response
  • Experience in IT audit and internal controls
  >Experience with Governance, Risk, and Compliance (GRC) frameworks (e.g., ISO 27001)
• Proficiency in Data analysis tools (e.g., SQL, Excel)
• Skilled in Python for scripting and automation
• Strong analytical and problem-solving abilities
• Good communication and presentation skills
• Critical thinking
• Ability to work collaboratively with diverse teams
• Adaptability to a constantly evolving threat landscape

About Tabby

Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money.

The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.

Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region.

Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.