Governance, Risk, and Compliance Specialist

About the Role

A market-leading IT services company in Saudi Arabia is looking for a Governance, Risk, and Compliance (GRC) Specialist to join its cybersecurity team in Riyadh. The role is centered on building and sustaining a strong cybersecurity governance framework that supports both local and global standards, protects digital assets, and helps the organization stay compliant with regulatory obligations.

What You’ll Do

• Design, roll out, and periodically refine cybersecurity policies, standards, and procedures aligned with ISO 27001, NIST, and COBIT frameworks.
• Carry out in-depth cyber risk assessments, pinpoint threats, and propose practical mitigation actions that fit the organization’s risk appetite.
• Run internal compliance reviews to confirm adherence to Saudi requirements, including NCA ECC/CSCS and SAMA frameworks.
• Track cybersecurity governance indicators and KPIs and prepare updates on the organization’s security posture.
• Assess the security controls of vendors and third-party service providers to verify they meet internal standards.
• Plan and deliver cybersecurity awareness sessions to help build a compliance-minded, security-first culture across the workforce.

What We’re Looking For

The ideal candidate has a background in computer science, cybersecurity, information technology, or a closely related discipline, along with hands-on experience in GRC, cybersecurity auditing, or information security management. A solid grasp of ISO 27001, NIST SP 800-53, and COBIT 5/2019 is important, as is familiarity with Saudi regulatory expectations such as NCA and SAMA. Strong analytical thinking, problem-solving ability, and excellent documentation skills in both Arabic and English are also required.

Additional Information

This opportunity is based in Riyadh, Saudi Arabia, and is a full-time, onsite position. Saudi nationals are especially encouraged to apply. Interested candidates were asked to share their CV by email.