Cybersecurity GRC

We are seeking cybersecurity professionals to join our Governance, Risk and Compliance (GRC) function.

Successful candidates will contribute to the organization's cybersecurity objectives by strengthening governance, managing cybersecurity risks, maintaining regulatory compliance, and continuously improving controls, policies, processes, and reporting. The scope and level of responsibility will be aligned with the candidate's qualifications and experience.

• Support or lead the implementation and maintenance of the cybersecurity governance framework, including clear roles, responsibilities, oversight mechanisms, and management reporting.
• Identify, assess, monitor, treat, and elevate cybersecurity risks using practical risk analysis and scoring approaches.
• Monitor compliance with applicable National Cybersecurity Authority requirements, regulatory obligations, internal policies, and recognized frameworks.
• Develop, review, and maintain cybersecurity policies, standards, procedures, control documentation, records, and supporting evidence.
• Support cybersecurity audits, assessments, regulatory-readiness activities, remediation plans, and closure of findings or control gaps.
• Prepare reports and presentations on cybersecurity posture, risks, compliance status, and improvement priorities.
• Collaborate with Cybersecurity, IT, business, risk, compliance, internal audit, consultants, and service providers to achieve effective GRC outcomes.
• Promote secure practices, accountability, continuous improvement, and effective stakeholder communication across the organization.
• Depending on seniority, coordinate GRC initiatives, resources, vendors, project risks, and team deliverables.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, Engineering, or a related discipline.
• Relevant experience in Cybersecurity GRC, cybersecurity technologies, operations, risk management, compliance, or control assurance. Candidates from entry level through experienced lead level may be considered.
• Working knowledge of cybersecurity risk assessments, governance, compliance monitoring, policy management, audit support, and reporting.
• Knowledge of NCA frameworks and controls, including ECC, DCC, OTCC, and CCC, is highly valued; familiarity with ISO/IEC 27001 and the NIST Cybersecurity Framework is an advantage.
• Professional certifications such as CISSP, CISM, CISA, ISO/IEC 27001 Lead Implementer or Lead Auditor, CCSP, CEH, OSCP, GICSP, ISA/IEC 62443, PMP, ITIL, or equivalent are preferred or may be required depending on the role level.
• Strong communication, documentation, analytical, collaboration, and stakeholder-management skills.
• Professional proficiency in Arabic and English is an advantage, particularly for reporting and stakeholder communication.