Business Analyst

About the Role

Synechron is seeking an experienced GRC Risk and Compliance Analyst to join our team in Riyadh, Saudi Arabia. This full-time role requires strong knowledge of information security controls, compliance frameworks, audit preparation, and evidence management processes. The successful candidate will support the mapping, assessment, implementation, monitoring, and documentation of information security controls against various frameworks.

Role Context and Collaboration

This position involves working with Information Security, Technology, Risk, Compliance, Internal Audit, external auditors, control owners, and business stakeholders. The primary objective is to ensure that controls are properly designed, implemented, evidenced, and tracked through remediation. The role also supports the continuous improvement of GRC processes and monitors changes in regulatory and security requirements.

Key Responsibilities

• Map organizational security controls against frameworks such as CIS Controls, NCA Essential Cybersecurity Controls, ISO/IEC 27001, and other applicable regulatory or security frameworks.
• Maintain control matrices, control libraries, evidence registers, and compliance documentation.
• Coordinate audit and compliance evidence collection workflows, working with control owners to obtain, validate, and organize audit evidence.
• Assess evidence for completeness, relevance, validity, and coverage.
• Identify control gaps, exceptions, and remediation requirements.
• Track risks, findings, corrective actions, and remediation activities through closure.
• Support internal audits, external audits, regulatory assessments, and compliance reviews.
• Prepare audit readiness reports, compliance dashboards, status updates, and management presentations.
• Maintain audit trails and ensure evidence is stored in a structured and traceable manner.
• Support risk assessments and control effectiveness reviews.
• Coordinate with Technology, Infrastructure, Cloud, Applications, IAM, SOC, Privacy, and Business teams.
• Review policies, standards, procedures, and control descriptions.
• Ensure control owners understand their responsibilities, evidence requirements, review frequency, and remediation timelines.

Qualifications and Experience

• A minimum of 5 to 10 years of experience in GRC, risk, and compliance analysis.
• Demonstrated knowledge of information security controls and compliance frameworks.
• Experience with audit preparation and evidence management processes.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, requiring collaboration across various internal and external teams to achieve compliance and security objectives.

Application Process

Candidates meeting the specified requirements are encouraged to apply. Salary details for this position will be discussed during the interview process.