GRC Senior Specialist

About the Company : GRC Senior Specialist About the Role

Establish and run the governance, risk, and compliance activities of the cybersecurity function, ensuring policies, controls, and regulatory obligations under SAMA CSF, NCA are documented, implemented, monitored, and reported.

• Develop, documents, and maintain cybersecurity policies, standards, and procedures, and ensure alignment with SAMA CSF, NCA ECC, DCC, and other applicable regulatory frameworks.
• Design, create, and monitor cybersecurity KPIs and KRIs, and produce periodic dashboards and reports for management.
• Govern the cybersecurity requirements within the change management process, ensuring security controls are embedded and enforced.
• Plan and conduct compliance activities, including self-assessments, gap analyses, evidence collection, and regulatory observation tracking.
• Conduct cybersecurity risk assessments, maintain the risk register, and track treatment and remediation.
• Conduct third-party and vendor cybersecurity risk assessments and periodic reviews, including right-to-audit and contractual security requirements.
• Support internal and regulatory audits and coordinate the closure of findings.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum 3 years of relevant experience in cybersecurity GRC, risk, or compliance.
• Working knowledge of SAMA CSF, NCA, and NIST.