We are seeking an experienced GRC, Risk & IAM Architect – Senior Associate to join a large-scale cybersecurity architecture and governance program within a highly regulated financial services environment.
This role will focus on cybersecurity governance, risk management, regulatory compliance, Identity and Access Management (IAM), Privileged Access Management (PAM), application security, and security architecture assurance. The successful candidate will play a critical role in ensuring security controls are aligned with business objectives, regulatory requirements, and industry best practices.
Key Responsibilities
- Lead cybersecurity risk and compliance activities across enterprise architecture initiatives.
- Conduct security architecture risk assessments and control gap analyses.
- Map and assess security controls against regulatory and industry standards, including:
- SAMA Cybersecurity Framework
- NCA Essential Cybersecurity Controls (ECC)
- PCI DSS
- ISO 27001
- Define and maintain governance processes related to security architecture, risk management, and compliance.
- Support the review and approval of architecture designs from a security and compliance perspective.
- Manage security exceptions, risk acceptance processes, and remediation plans.
- Prepare audit evidence and support internal and external audit activities.
- Define and enforce IAM and PAM architecture standards and best practices.
- Support authentication, authorization, single sign-on (SSO), identity federation, and access governance initiatives.
- Review application and API security architectures to ensure secure design principles are implemented.
- Support secure SDLC initiatives and security-by-design practices.
- Define requirements for data protection, encryption, cryptographic controls, and key management.
- Collaborate with cybersecurity, enterprise architecture, infrastructure, application development, risk, and compliance teams.
- Contribute to cybersecurity architecture governance, continuous improvement, and knowledge-sharing initiatives.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.
- Extensive experience in:
- Cybersecurity Governance, Risk, and Compliance (GRC)
- Security Architecture Risk Assessments
- Regulatory Compliance
- Security Controls Mapping
- Identity and Access Management (IAM)
- Privileged Access Management (PAM)
- Application Security Architecture
- API Security
- Data Protection and Encryption
- Security Audit and Compliance Activities
- Strong understanding of:
- Authentication and Authorization Models
- Identity Federation and Single Sign-On (SSO)
- Secure Software Development Lifecycle (Secure SDLC)
- Security Risk Management Frameworks
- Security Exception and Risk Acceptance Processes
Preferred Certifications
- CISA (Certified Information Systems Auditor)
- CRISC (Certified in Risk and Information Systems Control)
- ISO 27001 Lead Auditor
- CISSP (Certified Information Systems Security Professional)
- CSSLP (Certified Secure Software Lifecycle Professional)
- CIAM (Certified Identity and Access Manager)
- OSCP (Offensive Security Certified Professional)
Preferred Experience
- Experience within banking, financial services, fintech, or other highly regulated environments.
- Hands-on experience with IAM and PAM technologies.
- Experience supporting compliance initiatives and regulatory assessments.
- Strong knowledge of application security, API security, encryption, and key management frameworks.
- Experience working within enterprise cybersecurity architecture and governance functions.
Contract duration: 12 Months - Extendable
