Senior Information Security Specialist

Tweeq; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A prominent technology company is seeking an Information Security professional to safeguard its information assets and manage risks in compliance with SAMA's guidelines. You will oversee security operations, develop security policies, conduct risk assessments, and promote security awareness. Candidates should have a strong background in information security, knowledge of SAMA requirements, and experience with governance, risk management, and compliance tools like Archer. Join us in a dynamic environment in Riyadh!

Qualifications

• Proven experience in information security is mandatory.
• Knowledge of SAMA requirements and standards is essential.
• Experience with GRC tools like Archer is a plus.

Responsibilities

• Ensure adherence to SAMA requirements and standards.
• Conduct risk assessments and vulnerability analyses.
• Oversee implementation of security tools and technologies.
• Develop and deliver security awareness training programs.
• Prepare regular reports on the status of information security programs.

Skills

Proven experience in information security

Strong knowledge of SAMA requirements and standards

Experience with GRC tools such as Archer and Cyber Arrow

Strong analytical and problem-solving skills

Excellent communication and interpersonal skills

Ability to work in a fast-paced environment

Passionate about learning and career development

Tools

Archer

Cyber Arrow

Job description

Department: InfoSec GRC

Location: KSA

Description

Reporting directly to the Head of Information Security, you will play a pivotal role in safeguarding Tweeq's information assets, managing risks, and driving the implementation of robust security frameworks in compliance with SAMA's guidelines.

Key Responsibilities

Compliance and Governance

• Ensure adherence to SAMA requirements and standards.
• Develop, implement, and maintain information security policies, procedures, and guidelines.
• Monitor compliance with internal security policies and external regulatory requirements.

Risk Management

• Conduct risk assessments and vulnerability analyses to identify and mitigate security threats.
• Develop and implement risk management strategies and controls.
• Monitor and report on the effectiveness of security measures.

Security Operations

• Oversee the implementation and management of security tools and technologies.
• Coordinate with IT and other departments to ensure robust security measures are in place.
• Manage incident response and investigation processes.

Training and Awareness

• Develop and deliver security awareness training programs.
• Promote a culture of security awareness within the organization.

Project Involvement

• Participate in projects, including the onboarding and implementation of new systems, such as GRC tools.
• Attend workshops and contribute to the integration of security requirements into new projects.

Reporting and Documentation

• Prepare regular reports on the status of information security programs.
• Maintain documentation related to security policies, procedures, and incidents.

Skills, Knowledge & Expertise

• Proven experience in information security.
• Strong knowledge of SAMA requirements and standards.
• Experience with governance, risk management, and compliance (GRC) tools such as Archer and Cyber Arrow is preferred.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work in a fast‑paced, dynamic environment.
• Passionate about learning and career development.