Compliance and Risk Analysts for Saudi Security

Develop and harmonize GRC programs that reconcile differing legal requirements across regions and industries; analysts perform regulatory mapping for GDPR, HIPAA, SOX and industry mandates, build control matrices, maintain policy libraries and run regulatory change management so multinational Financial Services, Healthcare and Government entities remain compliant and audit-ready while preserving operational agility.

Conduct quantitative and qualitative risk assessments using asset inventories, threat modeling, business impact analysis, loss modeling and risk scoring to prioritize remediation. Deliver heat maps, scenario analysis, probabilistic loss estimates and KPI dashboards; enable informed risk acceptance, budget alignment and board-level reporting tailored to banking, insurance and critical infrastructure organizations.

Design data discovery, classification and protection programs to meet GDPR, CCPA, HIPAA and sector rules; implement DLP rules, encryption, access reviews, retention policies and automated DPIAs. Analysts work with legal and security teams to draft breach notification plans, conduct privacy impact assessments and embed privacy controls into cloud, SaaS and on-prem systems for healthcare, retail and tech firms.

Establish vendor risk frameworks with standardized assessments, continuous monitoring, contract clauses and remediation roadmaps; integrate vendor risk platforms and security ratings to manage supply-chain exposures. Provide onboarding controls, SLAs, audit rights and cyber insurance validation to protect manufacturing, logistics, retail and financial services from third-party breaches and compliance gaps.

Lead internal control testing, audit evidence collection and regulatory exam preparation; implement continuous compliance monitoring using GRC tools, SIEM logs and Power BI reporting. Produce audit-ready documentation, control-testing scripts, remediation trackers and regulator-facing reports to reduce audit cycles and demonstrate control effectiveness across highly regulated industries.

Align compliance with security operations by tuning SIEM, DLP and IAM alerts, maintaining forensic trails and embedding regulatory requirements into incident playbooks. Analysts run tabletop exercises, manage incident documentation for regulators, coordinate legal and communications responses and perform post-incident compliance reviews to close gaps in telecom, energy and public sector environments.

Automate workflows and evidence collection with ServiceNow GRC, RSA Archer, MetricStream, Python scripts and RPA to minimize manual effort and error. Develop role-based training, policy attestations, phishing simulations and vendor awareness programs; measure effectiveness via training metrics and compliance KPIs to drive culture change and sustained regulatory adherence.