Senior Cybersecurity Analyst – GRC

About the role

The Senior Cybersecurity Analyst – GRC will lead the implementation and maintenance of the organization’s cybersecurity framework, protecting sensitive data and ensuring business continuity at Johns Hopkins Aramco Healthcare.

Key responsibilities

• Implement, configure, maintain, support and monitor IT cybersecurity infrastructure, including firewalls, antivirus, encryption protocols, intrusion detection systems, access‑management, network‑monitoring and SOC solutions.
• Manage governance, risk, compliance and incident‑response programs, enforcing policies, standards and regulatory requirements through assessments, drills and training.
• Detect, investigate and respond to cybersecurity incidents, breaches and vulnerabilities in line with established procedures.
• Oversee vendor engagements for cybersecurity services, ensuring scope, cost and quality targets are met.
• Process cybersecurity aspects of IT demand requests and support project delivery within the organization’s IT project‑management framework.

Required profile

• Bachelor’s degree in Information Technology or a related field.
• Minimum 6 years of relevant experience.
• Professional certifications such as CISSP, CISM, CompTIA Security+, GSEC, PMP or ITIL are preferred.
• Full proficiency in English; Arabic not required.

Required skills

• Firewalls
• Antivirus solutions
• Encryption protocols
• Intrusion detection systems (IDS)
• Access‑management systems
• Network‑monitoring tools
• Security Operations Center (SOC) platforms
• Governance, Risk & Compliance (GRC) frameworks
• Incident response processes
• Vendor management
• IT project management fundamentals