Cybersecurity & GRC Specialist

About the role

We are seeking a Cybersecurity & GRC Specialist to develop and maintain security policies, frameworks and controls for our clients in Saudi Arabia, ensuring alignment with local regulations and international standards.

Key responsibilities

• Develop and maintain cybersecurity policies, frameworks and controls in line with NCA standards, SAMA framework, ISO 27001, NIST, SOC 2 and other relevant guidelines.
• Conduct risk assessments, gap analyses and audits to identify vulnerabilities and verify regulatory compliance.
• Support clients in managing cybersecurity risks, third‑party risk, projects and vendor assessments.
• Monitor and report on security controls, KPIs and compliance posture through periodic reviews.
• Drive security awareness initiatives, tabletop exercises and continuous improvement of security programs.
• Administer and monitor SIEM platforms to enhance log ingestion, correlation rules and real‑time threat detection for SOC operations.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity or a related field.
• 2–5 years of experience in cybersecurity, risk and compliance.
• Relevant certifications such as CISA, CISM or CISSP are preferred.
• Strong understanding of IT and cybersecurity infrastructure systems.
• Proficiency with Microsoft Office (Word, Excel, PowerPoint).
• Ability to work effectively in a team and adapt to a fast‑paced environment.

Required skills

• SIEM platform administration and monitoring.
• Knowledge of NCA standards, SAMA framework, ISO 27001, NIST and SOC 2.
• Risk assessment, gap analysis and audit techniques.
• Development of security policies and governance frameworks.
• Microsoft Office suite (Word, Excel, PowerPoint).