Cybersecurity GRC Specialist Engineer

About the role

The Cybersecurity GRC Specialist Engineer will lead the development and maintenance of governance, risk, and compliance programs within A1softech’s security framework. Based in Riyadh, the role combines policy creation, risk assessment, and hands‑on incident response to protect the organization’s digital assets.

Key responsibilities

• Develop, review, and maintain cybersecurity policies, procedures and standards.
• Support the creation of the cybersecurity strategy, roadmap and governance framework.
• Design and deliver cybersecurity awareness and training programs.
• Perform risk assessments on systems, applications and processes and keep the risk register up‑to‑date.
• Analyse identified risks, define mitigation strategies and track treatment plans.
• Ensure compliance with regulatory standards such as NCA, SDAIA, PDPL and ISO, and prepare audit evidence.
• Coordinate internal and external audits, track gaps and drive corrective actions.
• Produce reports and dashboards for management and monitor security KPIs.
• Act as a SOC analyst – monitor, detect and respond to threats using SIEM tools and conduct threat hunting.
• Conduct penetration testing and vulnerability assessments to validate security controls.

Required profile

• Proven experience in cybersecurity governance, risk management and compliance.
• Hands‑on experience with SOC operations, incident response and penetration testing.
• Familiarity with Saudi regulatory frameworks (NCA, SDAIA, PDPL) and international standards (ISO).
• Strong analytical skills and ability to produce clear security reports.

Required skills

• SIEM tools
• Threat hunting
• Penetration testing
• Vulnerability assessment
• Risk assessment
• Regulatory compliance (NCA, SDAIA, PDPL, ISO)