Cyber Security GRC Specialist

About the role

We are looking for a Cyber Security GRC Specialist to strengthen our governance, risk management and compliance programmes. The role will support the protection of information assets, cloud environments and data by ensuring robust governance structures and regulatory alignment.

Key responsibilities

• Develop, implement and maintain cybersecurity governance policies, frameworks and standards.
• Monitor adherence to policies, produce governance and risk posture reports for senior leadership.
• Conduct comprehensive risk assessments across business units and cloud services, maintain the risk register and drive remediation.
• Ensure compliance with Saudi regulatory frameworks (NCA ECC, SAMA CSF) and international standards such as ISO 27001, supporting audit activities and reporting.
• Assist in business continuity and disaster recovery planning, including BIA activities and testing.
• Support security awareness initiatives and promote a strong cybersecurity culture.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or a related field.
• 2–4 years of experience in cybersecurity GRC or a similar role.
• Strong knowledge of governance frameworks, risk management methodologies and KSA regulatory requirements.
• Relevant certifications such as ISO 27001 Lead Implementer or CompTIA Security+ are a plus.

Required skills

• Hands‑on experience with GRC tools.