Cyber Security Analyst📣 Job Ad

About the Role

The Trade Bank of Iraq (TBI) is seeking a Cybersecurity Analyst to join its Information Security function at the Saudi Arabia Branch in Riyadh. This full-time position is critical for protecting the confidentiality, integrity, and availability of the Branch's information assets and ensuring alignment with the Saudi Central Bank (SAMA) Cyber Security Framework, National Cybersecurity Authority (NCA) controls, and applicable data protection requirements.

Role Responsibilities

• Monitor security events and alerts from SIEM, endpoint protection, email security, firewall, and other security tools, triaging them by severity.
• Investigate suspected security incidents, gather and preserve evidence, document findings, and escalate according to approved procedures.
• Support the execution of the Cyber Incident Response and Recovery Plan, including participation in incident handling, containment, and post-incident reviews.
• Support the vulnerability management process, including reviewing scan results, risk-based prioritization, coordinating remediation with IT and service providers, and tracking to closure.
• Support the review and follow-up of penetration testing findings and the implementation of agreed remediation actions.
• Review and monitor user access rights, privileged accounts, and access logs, and support periodic user access review exercises.
• Support compliance with the SAMA Cyber Security Framework and NCA controls, including maintaining evidence, updating control self-assessments, and tracking identified gaps.
• Assist in preparing cybersecurity reports, metrics, and dashboards for the Head of Information Security, senior management, and regulatory submissions.
• Support the review of security configurations, hardening standards, and change requests from an information security perspective.
• Coordinate with IT and Managed Service Providers on security patching, security tool administration, and the resolution of security-related issues.
• Support third-party and outsourcing security risk assessments, including reviewing vendor security questionnaires and supporting evidence.
• Contribute to the delivery of security awareness training and phishing simulation exercises, and track staff participation and results.
• Coordinate with Anti-Fraud and Compliance functions on incidents involving fraud, data leakage, or suspected misuse of Bank systems.
• Maintain accurate, complete, and confidential security documentation, incident records, and evidence in line with the Bank's record-retention requirements.

Required Experience and Qualifications

• Minimum of 1 year of experience in cybersecurity, security operations, IT infrastructure, or a related technical role.
• Experience within banking, a financial institution, or another regulated environment is preferred.
• Exposure to SIEM, endpoint protection, firewall, or vulnerability scanning tools is an advantage.
• Familiarity with the SAMA Cyber Security Framework, NCA Essential Cybersecurity Controls, ISO 27001, or NIST is an advantage.
• Fresh graduates with strong academic records, relevant certifications, or relevant internship experience may be considered.

Essential Skills

• Sound understanding of networking, operating systems, and common attack techniques and threat vectors.
• Strong analytical and troubleshooting skills, with the ability to investigate alerts and reach evidence-based conclusions.
• Ability to remain composed and act decisively under pressure during security incidents.
• Strong report-writing and documentation skills.
• High level of integrity, professionalism, discretion, and attention to detail.
• Willingness to participate in on-call arrangements and to support incidents outside normal working hours when required.
• Strong interpersonal skills and the ability to coordinate with IT teams and external service providers.
• Proficiency in Microsoft Office; scripting skills are an advantage.

Work Environment

This role operates within a fast-paced, highly regulated banking environment, requiring the ability to work under pressure during security incidents. The position is based in Riyadh, Saudi Arabia.