Senior Specialist, Cybersecurity; GRC

The Senior Specialist – Cybersecurity GRC is responsible for managing governance, risk, and compliance activities to ensure the organization’s cybersecurity posture aligns with regulatory requirements and industry standards. The role focuses on policy development, risk assessments, and compliance with local frameworks.

• Develop, implement, and maintain cybersecurity policies, procedures, and standards
• Ensure compliance with local regulations such as CST Cybersecurity Framework and other applicable standards
• Conduct risk assessments and maintain risk registers with mitigation plans
• Perform gap analysis against frameworks (e.g., ISO/IEC 27001, NIST Cybersecurity Framework)
• Support internal and external audits, and ensure closure of findings
• Monitor compliance status and prepare regular reports for management
• Collaborate with IT, Security Operations, and business teams to enforce security controls
• Lead awareness initiatives related to cybersecurity governance and compliance
• Assist in third-party/vendor risk management assessments

• 3–5 years of experience in Cybersecurity GRC or related field
• Strong knowledge of cybersecurity frameworks and standards
• Experience with regulatory compliance in Saudi Arabia (CST preferred)
• Hands‑on experience in risk assessment and audit management
• Understanding of security controls, policies, and procedures
• Bachelor’s degree in Cybersecurity, IT, or related field