Cybersecurity Specialist (GRC & Risk)

About the role

We are looking for an experienced Cybersecurity Specialist to lead Governance, Risk, and Compliance (GRC) activities and manage cyber risk across our organization in Riyadh. The role involves hands‑on risk assessments, policy development, and supporting audits and incident response.

Key responsibilities

• Conduct comprehensive cybersecurity risk assessments for applications, networks, infrastructure, third‑party vendors, and new projects.
• Identify, analyze, and evaluate risks, documenting likelihood and business impact.
• Maintain the cyber risk register and drive risk treatment and mitigation plans.
• Develop, review, and keep up‑to‑date governance documentation such as policies, procedures, standards, and frameworks.
• Assess compliance with NCA Cybersecurity Controls, identify gaps, and coordinate remediation.
• Support internal and external audits, regulatory assessments, and compliance reviews.
• Investigate SOC alerts and security incidents, perform initial analysis, and monitor remediation.
• Collaborate with technical and business teams to improve the overall security posture.

Required profile

• Minimum 3 years of hands‑on experience in cybersecurity risk management and GRC.
• Proven ability to conduct independent risk assessments, not just coordinate them.
• Experience creating and maintaining governance documentation.
• Solid understanding of NCA Cybersecurity Controls and related compliance requirements.
• Experience supporting audits and regulatory assessments.
• Knowledge of incident response processes and SOC operations.
• Strong analytical, communication, and stakeholder‑management skills.

Required skills

• Cybersecurity risk assessment
• Governance, Risk & Compliance (GRC) frameworks
• NCA Cybersecurity Controls
• Incident response and SOC alert handling