Information Security Analyst – GRC

About the role

The Information Security Analyst supports the Governance, Risk, and Compliance (GRC) function by assisting in documentation, monitoring, and coordination of security activities across the organization. Working under senior GRC professionals, the analyst helps maintain a robust security governance framework and ensures alignment with regulatory requirements.

Key responsibilities

• Assist in maintaining documentation for the information security governance framework.
• Gather and update legal and regulatory requirements (e.g., GDPR, SAMA, ISO 27001, PCI‑DSS).
• Support asset classification, risk assessment, and business impact assessment activities.
• Collect data for threat and vulnerability assessments and prepare related reports.
• Help monitor SOC alerts, compliance monitoring, and adherence to cybersecurity policies.
• Assist in preparing internal and external communication materials on security governance.
• Support coordination of security reviews, audits, and awareness training.

Required profile

• Ability to assist in documentation and coordination of information security activities.
• Familiarity with regulatory frameworks such as SAMA, PDPL, GDPR, ISO 27001, and PCI‑DSS.
• Basic understanding of risk assessment, vulnerability assessment, and asset classification processes.

Required skills

• Knowledge of ISO 27001 standards.
• Knowledge of PCI‑DSS requirements.
• Understanding of SAMA and PDPL regulations.
• Familiarity with GDPR compliance concepts.
• Basic experience with risk assessment and threat/vulnerability analysis.