We are seeking an experienced cybersecurity consultant to assess the implementation and effectiveness of cybersecurity-related controls mapped to the Saudi Central Bank (SAMA) Counter Fraud Framework. The consultant will perform an on-site assessment, identify control gaps and weaknesses, and provide actionable findings and remediation recommendations.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Location: Riyadh, Saudi Arabia
Contract Type: 3-week fixed-term (on-site)
Language Requirements: English fluency; Arabic language skills an advantage.
Key Responsibilities:
- Conduct an on-site assessment of cybersecurity controls aligned to SAMA’s Counter Fraud Framework.
- Review policies, procedures, technical controls, and evidence to validate implementation and operating effectiveness.
- Map existing controls to SAMA requirements and identify gaps, risks, and control weaknesses specifically related to fraud prevention/detection.
- Perform interviews and walkthroughs with relevant stakeholders and technical teams.
- Validate technical configurations (where applicable) and review supporting artefacts (logs, reports, change records, access lists).
- Prepare a concise assessment report with prioritized findings, risk ratings, and clear remediation recommendations.
- Present findings to client stakeholders and support Q&A during closure meetings.
- Ensure all work is delivered within the 3-week engagement timeline.
Required Qualifications and Experience:
- Bachelor’s degree in computer science, Information Security, Cybersecurity, or related field (or equivalent work experience).
- Minimum 5 years of relevant cybersecurity experience, with demonstrable experience assessing controls in financial services.
- Prior, hands-on experience with SAMA frameworks, controls, and regulatory expectations—specifically familiarity with SAMA’s Counter Fraud Framework and related cybersecurity requirements.
- Strong knowledge of cybersecurity control domains: access management, logging and monitoring, incident response, change management, network and endpoint security, encryption, and vulnerability management.
- Experience performing control assessments, gap analysis, and producing executive/technical reports.
- Excellent stakeholder engagement and communication skills; able to work on-site and interact with senior client personnel.
- Relevant certifications preferred: CISA, CISSP, CRISC, or equivalent.
Deliverables:
- Control assessment workbook / mapping to SAMA Counter Fraud Framework.
- Concise assessment report with prioritized findings and remediation actions.
- Presentation of findings to client stakeholders.
