GRC Specialist – Cybersecurity Risk Management

About the role

Managed.sa is looking for a motivated GRC Specialist to join a cybersecurity project in Jeddah. You will work closely with business and technical stakeholders to assess risks, maintain compliance documentation, and support the implementation of security controls.

Key responsibilities

• Conduct cybersecurity risk assessments and document identified risks.
• Maintain risk registers, treatment plans, and follow‑up actions.
• Support the development and review of cybersecurity policies, procedures, and standards.
• Assess compliance with relevant frameworks and regulatory requirements.
• Identify control gaps and recommend remediation actions.
• Collect, organize, and review compliance evidence.
• Prepare risk and compliance reports for management and project stakeholders.
• Monitor remediation activities and coordinate with relevant teams.
• Assist internal and external cybersecurity audits and assessments.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, IT, Computer Science or a related field.
• 1.5–3 years of hands‑on experience in cybersecurity GRC.
• Practical experience in risk assessment and risk management.
• Familiarity with NCA ECC, ISO 27001, ISO 31000, and NIST Cybersecurity Framework.
• Strong documentation, reporting and stakeholder communication abilities.
• Ability to work independently and manage multiple compliance activities.
• Professional certifications in GRC, cybersecurity or risk management are a plus.
• Availability to work full‑time on‑site in Jeddah and join quickly.

Required skills

• Cybersecurity risk assessment
• Cybersecurity risk management
• ISO 31000
• Governance Risk and Compliance (GRC)
• NCA ECC
• NIST Cybersecurity Framework
• ISO 27001