Information Security Analyst

About the role

The Information Security Analyst supports the Governance, Risk, and Compliance (GRC) function by assisting in documentation, monitoring, and coordination of security activities across the organization. Working under senior GRC professionals, the analyst contributes to a robust security governance framework and helps align initiatives with regulatory requirements.

Key responsibilities

• Assist in maintaining documentation for the information security governance framework.
• Support alignment of security initiatives with business objectives and regulatory requirements.
• Gather and update legal and regulatory information (e.g., GDPR, SAMA, ISO 27001, PCI‑DSS).
• Help identify organisational drivers and document their impact on security.
• Maintain role and responsibility matrices for security across the organization.
• Support asset classification, risk assessments, and business impact analysis data collection.
• Assist in threat and vulnerability assessment reporting and control effectiveness evaluation.
• Track cybersecurity activities, SOC alerts, and compliance monitoring.
• Collect logs and reports for incident investigations and support threat‑intelligence gathering.
• Help coordinate security reviews, audits, and awareness training materials.

Required profile

• Works under guidance of senior GRC professionals.
• Ability to assist with documentation, data collection, and basic analysis.
• Interest in information security governance, risk management, and compliance.

Required skills

• Knowledge of ISO 27001 standards.
• Familiarity with PCI‑DSS requirements.
• Understanding of GDPR regulations.
• Awareness of SAMA and PDPL regulatory frameworks.