Security Analyst (AI)

TL;DR

Security Analyst (AI/GRC): Implementing and maintaining global security compliance frameworks for an AI-native Customer Experience Intelligence platform with an accent on GRC and security engineering. Focus on aligning security practices for the US and KSA markets, conducting risk assessments, and ensuring audit readiness.

Location: Remote (Must be based in Riyadh, Saudi Arabia)

Company

hirify.global is an AI-native Customer Experience Intelligence platform empowering enterprises to understand, engage, and retain customers at scale.

What you will do

• Implement and maintain ISO/IEC 27001, ISO/IEC 42001 (AI Management Systems), NCA, and SOC 2 controls.
• Align security and compliance practices with NIST frameworks and US data privacy requirements for market expansion.
• Manage regional data protection compliance activities, including KSA PDPL, Qatar PDPL, and US state laws.
• Develop and maintain security, privacy, and AI governance policies and control documentation.
• Coordinate document control and evidence collection for internal reviews and external audits.
• Collaborate with engineering, product, and operations teams to integrate security requirements into daily workflows.

Requirements

• 2-4 years of experience in a Security Analyst or GRC role, specifically within B2B SaaS environments.
• ISO/IEC 27001 and ISO/IEC 42001 Lead Implementer certifications (mandatory).
• Strong understanding of US compliance frameworks (SOC 2, NIST) and US data privacy regulations.
• Technical proficiency in API security, CI/CD pipeline reviews, and basic scripting (Python, Bash).
• Experience with professional documentation, document control, and audit evidence management.

Nice to have

• CISM certification.
• Knowledge of GDPR.
• Experience with Ruby on Rails code reviews.
• Prior experience working remotely with US-based teams.

Culture & Benefits

• Opportunity to shape the security foundation of a fast-growing AI company.
• Direct influence on governance, risk, and compliance practices at scale.
• Collaborative environment working across distributed, cross-functional teams.

Hiring process

• Screening interview by Talent Acquisition.
• Technical interview with the Security Delivery Manager.
• Culture fit interview with the TA Lead.