Senior Application Architecture Analyst Job

Elm Company; Riyadh; On-site; SAR 180,000 - 240,000; Full time

Job summary

Elm Company in Riyadh is seeking a Senior Analyst to support cybersecurity architecture and configuration assurance by reviewing system and solution designs, assessing security configurations, identifying architectural risks, and helping implement security-by-design principles to ensure compliance.

The role sits in the Cybersecurity unit within Application Architecture and involves documenting observations, supporting remediation, and coordinating with stakeholders for secure solution delivery.

Qualifications

• Bachelor's degree in a cybersecurity-related field.
• Certifications in cybersecurity, cloud security or security architecture are advantageous.
• 2–4 years of cybersecurity/security architecture experience.

Responsibilities

• Security Architecture Review: conduct reviews for new and existing systems.
• Assess designs against cybersecurity requirements and standards.
• Document security observations and recommended actions.
• Secure Configuration Assessment: review configurations against baselines.
• Identify weaknesses and support remediation actions.
• Infrastructure & Cloud Security Review: assess designs against security best practices.
• Document assessment results and remediation needs.
• Architecture Risk Assessment: identify and mitigate cybersecurity risks.
• Security-by-Design Enablement: collaborate with teams to include security requirements.
• Security Assessment & Sign-off Support: perform assessments and maintain evidence.
• Regulatory Technical Assessment Support: assist assessments by authorities.
• Maintain architecture security docs and improve assessment methods.

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering or related field

Professional certifications in cybersecurity, cloud security, or security architecture

Job description

ROLE PURPOSE

The aim is to state the overall significance of the job from the organization’s perspective. The role exists to support cybersecurity architecture and configuration assurance activities by reviewing system and solution designs, assessing security configurations, identifying architectural risks, and supporting the implementation of security-by-design principles to ensure technology solutions comply with cybersecurity requirements and standards.

Job Description

Job Title: Senior Analyst

Job Code: 555657

Grade: I2

Group:

Division: Legal, Risk & Governance

Department: Cybersecurity

Unit: Application Architecture

Key Accountabilities & Activities

• Security Architecture Review
• Conduct security architecture reviews for new and existing systems and solutions.
• Assess solution designs against cybersecurity requirements and standards.
• Document security observations and recommended actions.
• Secure Configuration Assessment
• Review system, infrastructure, and application configurations against approved security baselines.
• Identify configuration weaknesses and security gaps.
• Support stakeholders in implementing required configuration improvements.
• Infrastructure & Cloud Security Review
• Assess infrastructure, cloud, and network designs against security requirements and best practices.
• Support the identification of security risks associated with technology architectures.
• Document assessment results and required remediation actions.
• Architecture Risk Assessment
• Identify and assess cybersecurity risks associated with proposed architectures and technical solutions.
• Evaluate existing security controls and identify potential gaps.
• Recommend appropriate mitigation measures based on identified risks.
• Security-by-Design Enablement
• Support the incorporation of security requirements during solution design and implementation.
• Collaborate with technical teams to clarify security requirements and controls.
• Verify alignment with security-by-design principles throughout implementation activities.
• Security Assessment & Sign-off Support
• Perform assigned technical security assessments required for solution approvals.
• Maintain assessment evidence and security review documentation.
• Support security sign-off activities for systems and solutions.
• Regulatory Technical Assessment Support
• Support technical cybersecurity assessments conducted by regulatory authorities, including NCA-related assessments.
• Coordinate required technical evidence and documentation.
• Follow up on observations and remediation requirements resulting from assessments.
• Architecture Security Documentation & Improvement
• Maintain architecture security requirements, assessment records, and configuration standards.
• Monitor developments in architecture and cloud security practices.
• Contribute to improving architecture security assessment methods and controls.
• Policies, Processes & Procedures
• Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.
• Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.
• Information Security
• Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.

Academic And Professional Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
• Professional certifications in cybersecurity, cloud security, or security architecture are considered an advantage.

Years And Nature Of Experience

• 2–4 years of experience in cybersecurity, security architecture, technical security assessments, cloud security, or related cybersecurity domains.