{"id":3544391,"url":"https://alion.io/job/pwc-grc-cloud-security-analyst","title":"GRC & Cloud Security Analyst","company":{"id":5739,"name":"PwC","domain":"pwc.com","url":"https://alion.io/company/pwc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":69,"open_postings":2652,"ghost_share":0.51,"stale_share":0,"repost_share":0.001,"time_to_fill_p50_days":26,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Riyadh, Saudi Arabia"],"countries":["SA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"Microsoft Office","optional":true}],"status":"live","first_seen_at":"2026-10-28T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-28T00:00:00Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"Line of Service\nInternal Firm ServicesIndustry/Sector\nNot ApplicableSpecialism\nIFS - Internal Firm Services - OtherManagement Level\nAssociateJob Description & Summary\nAt PwC our people in managed services focus on a variety of outsourced solutions and support clients across numerous functions. These individuals help organisations streamline their operations reduce costs and improve efficiency by managing key processes and functions on their behalf. They are skilled in project management technology and process optimization to deliver high-quality services to clients.\nThose in managed service management and strategy at PwC will focus on transitioning and running services along with managing delivery teams programmes commercials performance and delivery risk. Your work will involve the process of continuous improvement and optimising of the managed services process tools and services.Why PwC\nEstablished in the region for over 40 years PwC Middle East employs over 6000 people across 12 countries: Bahrain Egypt Iraq Jordan Kuwait Lebanon Libya Oman Qatar Saudi Arabia Palestine and the United Arab Emirates. Complementing our depth of industry expertise and breadth of skills is our sound knowledge of local business environments across the Middle East region. Our tailored solutions help our clients meet the challenges and opportunities of doing business in the Middle East market and beyond.\n\nJob Summary\nA career in our Cyber technology services will allow you to work under the supervision of cyber cybersecurity leadership within the Cyber business unit consulting practice. Use strategic business consulting skills to work with clients through all stages of strategy-based transformation projects. Provide support on client assignments that help to develop a strategy and then refocus an organization on making that strategy a reality. We are a growing team and looking for dynamic flexible proactive and hardworking consultants who have a passion for shaping cybersecurity positively in the GCC over the coming years. We have a strong pipeline of large transformational opportunities with our clients which will provide great opportunities for all our people to step up and play significant and rewarding roles in an entrepreneurial and innovation driven environment.\nRoles & Responsibilities\nAs a Senior Associate youll work as part of a team of problem solvers helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:\nWork under the supervision of cybersecurity leadership within the Cyber & Digital Trust business unit consulting practice.\nSupport in the design and development of cybersecurity programs in different domains including the development of strategy GRC architecture identity and access management and cybersecurity solutions based on leading practices such as NIST CIS ISO27001 and others.\nSupport the development and implementation of cybersecurity governance risk and compliance frameworks aligned with NIST CSF ISO 27001 CIS Controls and local GCC regulatory requirements (e.g. NCA SAMA NESA TDRA NDMO).\nConduct cybersecurity risk assessments maturity assessments and gap analyses to benchmark client capabilities against industry standards and regulatory expectations.\nDevelop and refine cybersecurity policies procedures standards and guidelines ensuring alignment with business objectives compliance mandates and leading practices. \nSupport audit readiness and certification efforts for frameworks such as ISO 27001 and other related standards.\nDesign of cybersecurity strategies and roadmaps that balance risk management business enablement and digital transformation goals.\nWork closely with cross-functional teams to define target operating models for cybersecurity functions including governance structures roles and performance indicators.\nDevelop and execute cybersecurity awareness and culture programs. This includes designing tailored awareness campaigns executive briefings training programs and behavior-change initiatives to foster a culture of digital trust and resilience.\nAssist in the design of target technical security architecture for clients with deep understanding and analysis of emerging cybersecurity solutions including but not limited to threat intelligence anti-advanced persistent threats DLP SIEM next generation firewalls analytics enterprise incident response and others.\nSupport in the implementation of cybersecurity solutions at client premises and be able to work closely with security vendors and system integrators.\nCommunicate effectively (both verbal and writing) with executives IT personnel executives and business users communities translating complex cybersecurity concepts into actionable insights.\nSupport in coordinating facilitating and making presentations.\nSupport in business development activities including preparation of technical and financial proposals and participation in client pursuits.\nWork with colleagues across PwC Middle East offices on client engagements and internal initiatives as well as with international teams.\nConduct research on emerging cybersecurity technologies and disseminate knowledge to Cyber & Digital Trust consultants and clients where required.\nAssist in developing new service offerings for the Cyber & Digital Trust business unit.\nBuild deep understanding of regional cybersecurity themes and trends particularly those impacting clients in government financial services energy and critical infrastructure. Work collaboratively with other cybersecurity experts to shape the future of our clients and to bring about positive change.\nYou will have access to all of the latest training and development tools and the support of the wider PwC network.\nAdditional Roles & Responsibilities\nSkills and Competencies\nStrong understanding of emerging cybersecurity technologies and standards.\nExperience in cybersecurity strategy development operating model design culture transformation as well as cybersecurity governance risk and compliance management.\nExperience interpreting and applying GCC regulatory frameworks (NCA SAMA NESA PDPL etc.) and international leading practices (ISO 27001 NIST CSF etc.). \nSpecial experience in identity and access management SIEM/SOC security architecture cloud and DLP is a plus.\nAchievement oriented with the ability to be flexible and adaptive on a daily basis.\nExcellent organisational skills having the ability to prioritise workload whilst being resilient and able to cope well under pressure and meet tight deadlines.\nExcellent problem solving skills with a structured thinking process.\nStrong connections and relationships with clients in Saudi Arabia and the UAE is a plus.\nStrong time-management and organizational skills.\nAbility to learn new concepts and carry out technical research.\nProven IT skills in Microsoft Office and G-suite applications.\nLanguage Skills: Excellent communication skills (verbal and written) in English (Arabic is a plus).\nThe ability and willingness to travel within the Middle East is a MUST.\nEducational Qualifications & Certifications\nEducation: B.A/. in Computer Engineering or related field.. in Computer Engineering or related field is preferred.\n\nCandidates are expected to hold or be actively pursuing one or more of the globally recognized certifications relevant to Cybersecurity Digital Trust and Project Management.\nMinimum years experience required\n1-3 Years of experience\nAdditional application instructions\nN/A\nEducation (if blank degree and/or field of study not specified)\nDegrees/Field of Study required:Degrees/Field of Study preferred:Certifications (if blank certifications not specified)\nRequired Skills\nOptional Skills\nAccepting Feedback Accepting Feedback Active Listening Automation Automation Framework Design and Development Automation Solutions Budgetary Management Business Process Automation (BPA) Business Process Improvement Business Process Outsourcing Business Transformation Communication Continuous Process Improvement Data Quality Automation Deliverable Planning Delivery Excellence Design Automation Digital Transformation Emotional Regulation Empathy Inclusion Intellectual Curiosity Managed Services Operational Excellence Operational Performance Management (OPM) 19 moreDesired Languages (If blank desired languages not specified)\nTravel Requirements\nAvailable for Work Visa Sponsorship\nGovernment Clearance Required\nJob Posting End Date\n\nRequired Experience:\nIC","description_format":"text","description_chars":8509,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Information Security","Financial Advisory, Valuation & Restructuring","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-30T20:18:15Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":26,"reasons":["seen:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/pwc-grc-cloud-security-analyst","json_url":"https://alion.io/job/pwc-grc-cloud-security-analyst.json","meta":{"generated_at":"2026-10-31T08:20:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":2180,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5739},"rest":"https://alion.io/mcp/rest/get_company?id=5739"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpwc-grc-cloud-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpwc-grc-cloud-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpwc-grc-cloud-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pwc-grc-cloud-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpwc-grc-cloud-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3544391}},{"tool":"search_jobs","arguments":{"company":"pwc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3544391},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}