Senior Cybersecurity Specialist – GRC

About the role

The Senior Cybersecurity Specialist – GRC will support the implementation and continuous improvement of governance, risk and compliance frameworks across IT, IS and OT environments. The role focuses on risk assessments, policy maintenance, regulatory compliance and raising security awareness within the organization.

Key responsibilities

• Assist in developing cybersecurity policies, procedures, and standards.
• Perform risk assessments, audits and compliance reviews.
• Manage third‑party cybersecurity risk assessments and maintain the risk register.
• Conduct cybersecurity awareness training and phishing simulations.
• Monitor threat intelligence and emerging cyber risks.
• Support implementation of data security and privacy controls.
• Participate in incident response and reporting activities.
• Prepare KPI reports and support performance monitoring.
• Mentor junior cybersecurity team members.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Security or a related field.
• Minimum 5 years of experience in Cybersecurity GRC, IT GRC or Information Security.
• Hands‑on experience in risk management, compliance and policy development.

Required skills

• CISA, CISM, CRISC, CISSP, Security+, SSCP, CEH, GIAC certifications.
• Knowledge of ISO 27001 Lead Implementer/Auditor, NIST and ITIL frameworks.
• Strong understanding of Saudi NCA and HCIS regulations.
• Experience with IT/OT cybersecurity environments and third‑party risk assessments.