GRC(Governance, Risk & Compliance)Specialist

We are seeking a GRC (Governance, Risk & Compliance) Specialist to support our cybersecurity consulting and compliance services. In this role, you will help organizations establish effective governance frameworks, assess cybersecurity risks, ensure compliance with local and international standards, and strengthen their overall security posture. This position requires a strong understanding of cybersecurity frameworks, risk management, and regulatory requirements within Saudi Arabia.

Key Responsibilities

• Develop and maintain cybersecurity policies, standards, and procedures.
• Conduct cybersecurity risk assessments and maintain risk registers.
• Perform compliance and gap assessments against frameworks such as NCA ECC, SAMA CSF, ISO 27001, and NIST CSF.
• Support clients in implementing governance and compliance programs.
• Prepare audit documentation and coordinate internal and external cybersecurity audits.
• Track remediation plans and ensure timely closure of compliance findings.
• Conduct third-party and vendor security assessments.
• Prepare governance reports, risk dashboards, and executive presentations.
• Support awareness initiatives related to cybersecurity governance and compliance.
• Stay current with cybersecurity regulations and emerging best practices.

Requirements

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field.
• 2–5 years of experience in Governance, Risk & Compliance.
• Knowledge of Saudi cybersecurity regulations, including NCA ECC and SAMA CSF.
• Experience with ISO 27001, NIST CSF, COBIT, or CIS Controls.
• Experience supporting cybersecurity audits and risk management activities.
• Professional certifications such as ISO 27001 Lead Auditor/Implementer, CISA, CRISC, or CGRC are preferred.

What We're Looking For

• Strong analytical and problem-solving skills.
• Excellent documentation and report-writing abilities.
• Strong communication and stakeholder management skills.
• High attention to detail and organizational skills.
• Ability to manage multiple projects and deadlines.
• A proactive mindset with a passion for governance and continuous improvement.