GRC Specialist

About the role

We are seeking a motivated and detail‑oriented GRC Specialist to strengthen our cybersecurity team. In this position you will lead governance, risk, and compliance initiatives, focusing on security audits, compliance assessments, gap analysis, and remediation planning for our customers.

Key responsibilities

• Support the execution of GRC activities, including governance, risk management, compliance, and audit tasks.
• Conduct and support security audits and compliance assessments against Saudi and international cybersecurity frameworks.
• Assess cybersecurity controls, identify gaps, and develop remediation plans.
• Build cybersecurity strategies and roadmaps aligned with customer business needs and regulatory requirements.
• Develop, review, and maintain policies, procedures, standards, and related documentation.
• Perform risk assessments and track mitigation actions.
• Gather audit evidence, coordinate with stakeholders, and prepare reports, findings, and status updates.
• Assist customers in improving governance and compliance maturity.
• Contribute to continuous improvement of GRC processes, templates, and methodologies.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT or related field.
• Minimum 3 years of experience in GRC, cybersecurity, compliance, risk management or audit.
• Hands‑on experience with security audits, compliance assessments, gap analysis or control reviews.
• Strong analytical ability, attention to detail, and effective written communication.
• Ability to work collaboratively with cross‑functional teams and manage multiple tasks.

Required skills

• Security audits
• Compliance assessments
• Gap analysis
• Control reviews
• Knowledge of Saudi frameworks (Aramco CCCCST, NCA ECC, OTCC, DCC, CCCSAMA CSF, MVC, CRFR)
• Familiarity with ISO 27001, NIST, CIS Controls
• Risk assessment methodology