As the company grows internationally, maintaining strong security controls and achieving global compliance certifications is mission-critical. This role will directly contribute to implement and achieve security compliance frameworks, ensuring the company meets the highest standards of data protection and information security. You’ll work at the intersection of GRC and Security Engineering, supporting compliance initiatives, strengthening internal controls, and enabling secure product development across cross-functional teams.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
What You’ll Be Doing
- Work closely with GRC and Security Engineering teams to support security, privacy, and compliance initiatives across Saudi Arabia, Qatar, international regions, and the U.S. market
- Assist in the implementation and ongoing maintenance of ISO/IEC 27001, ISO/IEC 42001 (AI Management Systems), NCA and SOC 2 controls
- Support U.S. market migration efforts by helping align security and compliance practices with SOC 2, NIST frameworks, and U.S. data privacy requirements
- Contribute to regional data protection compliance activities, including KSA PDPL, Qatar PDPL, and U.S. states privacy laws, under guidance from senior team members
- Participate in the creation, update, and maintenance of security, privacy, and AI governance policies, procedures, and control documentation
- Help with document control, evidence collection, and audit readiness for internal reviews, customer assessments, and external audits
- Work cross-functionally with engineering, product, and operations teams
Requirements
Experience & Background
- 2 - 4 years of experience in a similar Security Analyst / GRC role
- Experience working with US-based SaaS companies
- Strong understanding of AI and US compliance frameworks:
- ISO/IEC 42001
- NIST
- US data privacy regulations
- Experience in B2B SaaS environments
Compliance & Security Knowledge
- ISO/IEC ISO 27001, ISO/IEC 42001 implementation knowledge (Implementer certification preferred)
- SOC 2 understanding
- NCA understanding and practical experience
- GDPR knowledge is a plus
- Penetration testing & vulnerability assessment knowledge
Technical Skills
- API security & integrations
- Basic scripting (Python, Bash)
- Code review support for deployments (automated tools)
- Security reviews of CI/CD pipelines
- Ruby / Rails code review experience is highly advantageous
Certifications
- CISM (preferred)
- ISO/IEC 24001 Lead Implementer (mandatory)
- ISO/IEC 27001 Lead Implementer (mandatory)
Soft Skills
- Excellent professional documentation skills
- Strong organizational and follow-up abilities
- Experience with document control and audit evidence
- Ability to work effectively across distributed, cross-functional teams
If you’re passionate about security, compliance, and global scale, and want to help shape the security foundation of a fast-growing AI company - we’d love to hear from you.
