IT GRC Specialist
Job in
Riyadh, Riyadh Region, Saudi Arabia
Listed on 2026-10-02
Listing for:
Sahm Capital
Full Time
position Listed on 2026-10-02
Job specializations:
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Business Analyst, IT Consultant
Job Description & How to Apply Below
The IT GRC Specialist to support IT governance, risk management, and compliance activities across the organization. The role is responsible for maintaining compliance with relevant Saudi regulatory requirements, supporting audits, managing IT risks and helping improve cybersecurity and governance practices within a financial services environment.
The IT GRC Specialist’s tasks will include but are not limited to:
- Support compliance initiatives related to NCA, CMA, PDPL and other applicable regulatory requirements.
- Assist in implementing and maintaining IT governance and cybersecurity frameworks such as ISO 27001 and related standards.
- Develop, review and maintain IT policies, procedures, standards and controls.
- Maintain the IT risk register and track remediation activities.
- Conduct IT and cybersecurity risk assessments for vendors and third parties.
- Support internal and external audits by coordinating evidence collection and remediation activities.
- Monitor compliance status and prepare governance and risk reports for management.
- Work closely with IT, Security, Risk and Business teams to improve control effectiveness and regulatory readiness.
Bachelor's degree in information technology, Information Systems, Cybersecurity or equivalent degree
3–5 years of experience in IT Governance, Risk & Compliance (GRC), IT Audit, Information Security or a related role, and the GCC region is a plus.
- Certifications (Must have)
- Certified in Risk and Information Systems Control (CRISC)
- Certified Information Systems Auditor (CISA)
- Experience working with regulatory frameworks such as NCA ECC, ISO 27001, PDPL or financial-sector compliance requirements is preferred.
- Experience with in financial services, fintech, banking or capital markets is an advantage.
- Understanding of IT governance, risk management and compliance principles.
- Familiarity with IT controls including access management, change management, vulnerability management and disaster recovery.
- Strong documentation, reporting and audit coordination skills.
- Good analytical and stakeholder management abilities.
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×