Cybersecurity Governance, Risk & Compliance Specialist

About the role

Eram Talent is recruiting a Cybersecurity Governance, Risk & Compliance (GRC) Specialist in Saudi Arabia to support the development, implementation and continuous improvement of the organization's Cybersecurity GRC framework. The role covers risk assessments, policies and procedures, compliance monitoring and security awareness initiatives so that IT, information systems and operational technology environments stay secure and compliant.

Key responsibilities

• Develop, review and maintain cybersecurity policies, procedures and standards.
• Conduct cybersecurity risk assessments, compliance audits and identify security gaps.
• Maintain cybersecurity risk registers and monitor mitigation actions.
• Perform third-party and vendor cybersecurity risk assessments.
• Ensure compliance with Saudi NCA and HCIS cybersecurity requirements.
• Support cybersecurity awareness programs, phishing simulations and incident response activities.
• Monitor IT/OT security controls and prepare compliance reports and KPIs.

Required profile

• Bachelor's degree in Cybersecurity, Information Security, Computer Science or Information Technology.
• 5-6 years of experience in Cybersecurity GRC, IT GRC or Information Security.
• Experience in Oil & Gas, Petrochemical, Power Generation or related industrial projects.
• Strong knowledge of Saudi NCA and HCIS cybersecurity requirements.
• Hands-on experience in risk assessments, audits, policy development and compliance management.
• Good understanding of IT and OT cybersecurity environments.

Preferred certifications

• CISA, CRISC, CISM, CISSP, ISO 27001 Lead Implementer/Lead Auditor, Security+, or CEH.